CVE-2022-24599
- State
- Published
- Severity
- Not scored
- Published
- Feb 22, 2022
- Updated
- Nov 3, 2025
- Reserved
- Feb 7, 2022
Description
In autofile Audio File Library 0.3.6, there exists one memory leak vulnerability in printfileinfo, in printinfo.c, which allows an attacker to leak sensitive information via a crafted file. The printfileinfo function calls the copyrightstring function to get data, however, it dosn't use zero bytes to truncate the data.
Scores
The record has no CVSS score.
Weaknesses
The record names no weakness.
Affected Products
| Product | Versions |
|---|---|
n/an/a |
|
References
- https://github.com/mpruett/audiofile/issues/60
- [debian-lts-announce] 20231112 [SECURITY] [DLA 3650-1] audiofile security updatemailing-list
- FEDORA-2023-47d4f575a3vendor-advisory
- FEDORA-2023-e23e432cb2vendor-advisory
- FEDORA-2023-07669abb35vendor-advisory
- https://lists.debian.org/debian-lts-announce/2025/07/msg00020.html
Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.