CVE-2022-24599

Name of the Vulnerable Software and Affected Versions autofile Audio File Library version 0.3.6

Description The issue is related to a memory leak in the printfileinfo function, located in printinfo.c, which can be exploited by an attacker to leak sensitive information via a crafted file. This occurs because the printfileinfo function calls the copyrightstring function to retrieve data but fails to use zero bytes to truncate the data.

Recommendations For autofile Audio File Library version 0.3.6, consider applying a patch or update that fixes the memory leak issue in the printfileinfo function. As a temporary workaround, consider restricting the use of the printfileinfo function until a patch is available.