NetSight
IP …
medium6.5

CVE-2022-24599

In autofile Audio File Library 0.3.6, there exists one memory leak vulnerability in printfileinfo, in printinfo.c, which allows an attacker to leak sensitive i…

Impact

In autofile Audio File Library 0.3.6, there exists one memory leak vulnerability in printfileinfo, in printinfo.c, which allows an attacker to leak sensitive information via a crafted file. The printfileinfo function calls the copyrightstring function to get data, however, it dosn't use zero bytes to truncate the data.

Affected products

VendorProductAffected versions
AudiofileAudiofile
Version 0.3.6
DebianDebian Linux
Version 10.0
FedoraprojectFedora
Versions 37, 38, 39

Weakness classification

CWE-401

References