Track vulnerabilities like this one. Sign up free to get alerted when software you use is affected.
9.3

Aubio Library: Buffer Overflow in Tempo Calculation

CVE-2018-19800 · published 7 years ago
Summary

Aubio, a library used for audio analysis, has a bug that can cause it to crash or behave unexpectedly when processing audio data. This affects versions 0.4.0 to 0.4.8. You should update to the latest version, which has this issue fixed.

What to do
  • Update paul brossier aubio to version 0.4.9.
Affected software
Ecosystem VendorProductAffected versions
pip paul brossier aubio >= 0.4.0, < 0.4.9
Fix: upgrade to 0.4.9
– aubio aubio >= 0.4.0, <= 0.4.8
cpe:2.3:a:aubio:aubio:*:*:*:*:*:*:*:*
Original advisory text
aubio v0.4.0 to v0.4.8 has a Buffer Overflow in new_aubio_tempo.
aubio v0.4.0 to v0.4.8 has a Buffer Overflow in new_aubio_tempo.
References
Fix within
Internet-facing 3 days
Internal 60 days
  • Not known to be exploited
  • Can be exploited automatically (estimated)
  • Gives an attacker full control (estimated)
Severity
9.3 Critical
Exploitation
2% chance of attack within 30 days
Type
CWE-119Buffer Overflow
Timeline
Published7 Jun 2019
Updated29 Oct 2026
First seen6 Mar 2026
Sources
GHSA-grmf-4fq6-2r79 · GHSA
CVE-2018-19800 · NVD
Track software like this
Free during beta