Approved changes feed: RSS · Atom

cpe:2.3:a:aubio:aubio:0.4.6:*:*:*:*:*:*:*

part: a version: 0.4.6 update: *

VendorAubio (33e3a6b5-c345-5b2c-9eca-8e5fb8d49f94)
ProductAubio (d403a8eb-a348-5bbb-8c26-7bf11b4990a8)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
pkg:deb/debian/aubio purl2cpe 2026-06-01 10:13:23.516949
pkg:deb/ubuntu/aubio purl2cpe 2026-06-01 10:13:23.516950
pkg:github/aubio/aubio purl2cpe 2026-06-01 10:13:23.516951
pkg:pypi/aubio purl2cpe 2026-06-01 10:13:23.516953
pkg:rpm/fedora/aubio purl2cpe 2026-06-01 10:13:23.516954
pkg:rpm/opensuse/aubio purl2cpe 2026-06-01 10:13:23.516955
pkg:sourceforge/aubio purl2cpe 2026-06-01 10:13:23.516957

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2018-14523 vulnerable 2026-06-08 05:10:53.015192 Details available
An issue was discovered in aubio 0.4.6. A buffer over-read can occur in new_aubio_pitchyinfft in pitch/pitchyinfft.c, as demonstrated by aubionotes.
Published: 2018-07-23T08:00:00.000Z
Updated: 2024-08-05T09:29:51.710Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2018-14522 vulnerable 2026-06-08 05:10:53.013243 Details available
An issue was discovered in aubio 0.4.6. A SEGV signal can occur in aubio_pitch_set_unit in pitch/pitch.c, as demonstrated by aubionotes.
Published: 2018-07-23T08:00:00.000Z
Updated: 2024-08-05T09:29:51.655Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2018-14521 vulnerable 2026-06-08 05:10:53.012695 Details available
An issue was discovered in aubio 0.4.6. A SEGV signal can occur in aubio_source_avcodec_readframe in io/source_avcodec.c, as demonstrated by aubiomfcc.
Published: 2018-07-23T08:00:00.000Z
Updated: 2024-08-05T09:29:51.665Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2017-17555 vulnerable 2026-06-08 05:09:09.582341 Details available
The swri_audio_convert function in audioconvert.c in FFmpeg libswresample through 3.0.101, as used in FFmpeg 3.4.1, aubio 0.4.6, and other products, allows remote attackers to cause a denial of service (NULL pointer dereference and application crash) via a crafted audio file.
Published: 2017-12-12T01:00:00.000Z
Updated: 2024-08-05T20:51:32.277Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2017-17554 vulnerable 2026-06-08 05:09:09.582020 Details available
A NULL pointer dereference (DoS) Vulnerability was found in the function aubio_source_avcodec_readframe in io/source_avcodec.c of aubio 0.4.6, which may lead to DoS when playing a crafted audio file.
Published: 2017-12-12T01:00:00.000Z
Updated: 2024-09-16T21:02:42.968Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2017-17054 vulnerable 2026-06-08 05:09:07.784613 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.