The swri_audio_convert function in audioconvert.c in FFmpeg libswresample through 3.0.101, as used in FFmpeg 3.4.1, aubio 0.4.6, and other products, allows remote attackers to cause a denial of service (NULL pointer dere…
A NULL pointer dereference (DoS) Vulnerability was found in the function aubio_source_avcodec_readframe in io/source_avcodec.c of aubio 0.4.6, which may lead to DoS when playing a crafted audio file.
CVSS 3.0MEDIUM 5.5·Local·No auth·User interaction·EPSS 0.00813·Published 2017-12-12·Fixed in 0.4.7CWE-476
In aubio 0.4.6, a divide-by-zero error exists in the function new_aubio_source_wavread() in source_wavread.c, which may lead to DoS when playing a crafted audio file.
CVSS 3.0MEDIUM 5.5·Local·No auth·User interaction·EPSS 0.00839·Published 2017-11-29·Fixed in 0.4.7CWE-369