A null pointer dereference issue was discovered in functions op_get_data and op_open1 in opusfile.c in xiph opusfile 0.9 thru 0.12 allows attackers to cause denial of service or other unspecified impacts.
github.com/xiph/opusfile/commit/0a4cd796df5b030cb866f3f4a5e41a4b92caddf5
github.com/xiph/opusfile/issues/36
lists.fedoraproject.org/archives/list/[email protected]/message/2ODIA6QRIRBNF2HRXOE5VCZ2AFP4ZB4R/
lists.fedoraproject.org/archives/list/[email protected]/message/4LIKBLOE433RA44YTYUZLED4IOWJG5DV/
lists.fedoraproject.org/archives/list/[email protected]/message/ED4CWLBR2WQ2IXXTHZ24UYZBRNCLMJXH/
lists.fedoraproject.org/archives/list/[email protected]/message/MYPAQANM2ZNPXRBFOS5NFXNJ7O4Q3OBD/