Tinyproxy · Tinyproxy · CVE-2022-40468
**Name of the Vulnerable Software and Affected Versions**
Tinyproxy versions prior to commit 84f203f
**Description**
The issue is related to a potential leak of left-over heap data when custom error page templates containing special non-standard variables are used. This occurs because Tinyproxy commit 84f203f and earlier use uninitialized buffers in the `process request()` function.
**Recommendations**
For versions prior to commit 84f203f, consider updating to a version that initializes buffers properly in the `process request()` function to prevent the potential leak of left-over heap data. As a temporary workaround, avoid using custom error page templates with special non-standard variables until a patch is available.