aubio v0.4.0 to v0.4.8 has a newaubioonset NULL pointer dereference.
"https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2018-19802.json"