CVE-2022-24599 - CVE House
Back to Database
Status published Medium CVE-2022-24599

In autofile Audio File Library 0.3.6, there exists one memory...

Vulnerability Description

In autofile Audio File Library 0.3.6, there exists one memory leak vulnerability in printfileinfo, in printinfo.c, which allows an attacker to leak sensitive information via a crafted file. The printfileinfo function calls the copyrightstring function to get data, however, it dosn't use zero bytes to truncate the data.

Impact Analysis

Refer to official advisory for detailed impact metrics.

Remediation

Ensure systems are updated to the latest vendor-supplied patch levels.

THREAT MONITOR

Am I Vulnerable?

Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2022-24599

Credits & Attribution

No credits recorded in the NVD database.

References

More from audiofile

View All →
CVE-2020-18781
Heap buffer overflow vulnerability in FilePOSIX::read in File.cpp in audiofile...
Medium 5.5
CVE-2019-13147
In Audio File Library (aka audiofile) 0.3.6, there exists one...
Medium 6.5
CVE-2018-17095
An issue has been discovered in mpruett Audio File Library...
High 8.8
CVE-2018-13440
The audiofile Audio File Library 0.3.6 has a NULL pointer...
Medium 6.5
CVE-2017-6839
Integer overflow in modules/MSADPCM.cpp in Audio File Library (aka audiofile)...
Medium 5.5

Affected Vendor

Affected Software

audiofile, debian linux, fedora
Vulnerable Versions:
0.3.6, 10.0, 37, 38, 39

Timeline

Official Publish: February 22nd, 2022
Last Modified: November 3rd, 2025
Added to House: July 21st, 2026

CVSS Vectors

V3: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N

Weaknesses (CWE)

No CWE data available

MITRE ATT&CK TTPs

No associated TTPs found for this vulnerability.