Home
Trends
Vulnerabilities
News
Researchers
Why dbugs?

Zzero00O

#40797of 53,622
6.5Total CVSS
Vulnerabilities · 1
PT-2022-16746
6.5
2022-02-22
Unknown · Autofile Audio File Library · CVE-2022-24599
**Name of the Vulnerable Software and Affected Versions** autofile Audio File Library version 0.3.6 **Description** The issue is related to a memory leak in the `printfileinfo` function, located in `printinfo.c`, which can be exploited by an attacker to leak sensitive information via a crafted file. This occurs because the `printfileinfo` function calls the `copyrightstring` function to retrieve data but fails to use zero bytes to truncate the data. **Recommendations** For autofile Audio File Library version 0.3.6, consider applying a patch or update that fixes the memory leak issue in the `printfileinfo` function. As a temporary workaround, consider restricting the use of the `printfileinfo` function until a patch is available.