In autofile Audio File Library 0.3.6, there exists one memory leak vulnerability in printfileinfo, in printinfo.c, which allows an attacker to leak sensitive information via a crafted file. The printfileinfo function calls the copyrightstring function to get data, however, it dosn't use zero bytes to truncate the data.
Advisories
Source ID Title
Debian DLA Debian DLA DLA-3650-1 audiofile security update
Debian DLA Debian DLA DLA-4255-1 audiofile security update
Ubuntu USN Ubuntu USN USN-6558-1 audiofile vulnerabilities
Fixes

Solution

No solution given by the vendor.


Workaround

No workaround given by the vendor.

History

Thu, 21 Aug 2025 19:15:00 +0000

Type Values Removed Values Added
First Time appeared Audiofile
Audiofile audiofile
CPEs cpe:2.3:a:audio_file_library_project:audio_file_library:0.3.6:*:*:*:*:*:*:* cpe:2.3:a:audiofile:audiofile:0.3.6:*:*:*:*:*:*:*
Vendors & Products Audio File Library Project
Audio File Library Project audio File Library
Audiofile
Audiofile audiofile

Sun, 13 Jul 2025 13:45:00 +0000

Type Values Removed Values Added
Metrics epss

{'score': 0.00118}

epss

{'score': 0.00136}


cve-icon MITRE

Status: PUBLISHED

Assigner: mitre

Published:

Updated: 2024-08-03T04:13:56.990Z

Reserved: 2022-02-07T00:00:00

Link: CVE-2022-24599

cve-icon Vulnrichment

No data.

cve-icon NVD

Status : Analyzed

Published: 2022-02-24T15:15:29.633

Modified: 2025-08-21T19:04:57.400

Link: CVE-2022-24599

cve-icon Redhat

Severity : Moderate

Publid Date: 2022-02-24T00:00:00Z

Links: CVE-2022-24599 - Bugzilla

cve-icon OpenCVE Enrichment

No data.