-
CVSS Score
-| Package Name | Ecosystem | Vulnerable Versions | First Patched Version |
|---|---|---|---|
| aubio | pip | < 0.4.7 | 0.4.7 |
The vulnerability explicitly references new_aubio_source_wavread() in the title/description. The GitHub commit diff shows this function was patched with input validation checks for zero values in critical parameters. The CWE-369 (Divide By Zero) and crash analysis in GitHub Issue #148 confirm the unvalidated division operation occurred here. The function's pre-patch code path directly used these parameters without checks, making it the clear entry point for the vulnerability.
A Semantic Attack on Google Gemini - Read the Latest Research