Unknown · Autofile Audio File Library · CVE-2022-24599
**Name of the Vulnerable Software and Affected Versions**
autofile Audio File Library version 0.3.6
**Description**
The issue is related to a memory leak in the `printfileinfo` function, located in `printinfo.c`, which can be exploited by an attacker to leak sensitive information via a crafted file. This occurs because the `printfileinfo` function calls the `copyrightstring` function to retrieve data but fails to use zero bytes to truncate the data.
**Recommendations**
For autofile Audio File Library version 0.3.6, consider applying a patch or update that fixes the memory leak issue in the `printfileinfo` function. As a temporary workaround, consider restricting the use of the `printfileinfo` function until a patch is available.