Aubio is vulnerable to a NULL pointer dereference in new_aubio_notes function

HIGH 7.5CVE-2018-19802 · GHSA-c6jq-h4jp-72pr · PYSEC-2019-164 · Published 07/06/2019 · updated 17/06/2026

In short

CVE-2018-19802 is a HIGH (CVSS 7.5) vulnerability affecting aubio, aubio (aubio).
Chance of exploitation in the next 30 days (EPSS): 2.3%, higher than 83.0% of all vulnerabilities.
Fix: update to 0.4.9 or later.

Package	Affected versions	Patched versions
aubio PyPI	`≥ 0.4.0, < 0.4.9`	`0.4.9`
aubio aubio	`≥ 0.4.0, ≤ 0.4.8`	No fix yet

aubio v0.4.0 to v0.4.8 has a new_aubio_onset NULL pointer dereference in new_aubio_notes function within src/notes/notes.c.

NVD description

aubio v0.4.0 to v0.4.8 has a new_aubio_onset NULL pointer dereference.

Running one of these products? Scan your site to see whether it exposes a vulnerable version.