PT-2022-16746 · Unknown+4 · Autofile Audio File Library+4

Zzero00O · Published 2022-02-22 · Updated 2026-05-15 · CVE-2022-24599

Positive Technologies (AI Summary)

CVSS v3.1

6.5

Medium

Base vector

AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N

Name of the Vulnerable Software and Affected Versions autofile Audio File Library version 0.3.6

Description The issue is related to a memory leak in the printfileinfo function, located in printinfo.c, which can be exploited by an attacker to leak sensitive information via a crafted file. This occurs because the printfileinfo function calls the copyrightstring function to retrieve data but fails to use zero bytes to truncate the data.

Recommendations For autofile Audio File Library version 0.3.6, consider applying a patch or update that fixes the memory leak issue in the printfileinfo function. As a temporary workaround, consider restricting the use of the printfileinfo function until a patch is available.

Exploit

Fix

DoS

Memory Leak

Weakness Enumeration

CWE-401

Related Identifiers

AZL-66560

AZL-66563

CVE-2022-24599

DLA-3650-1

DLA-4255-1

MGASA-2023-0336

OESA-2026-2353

OPENSUSE-SU-2025:15050-1

OPENSUSE-SU-2025_1559-1

SUSE-SU-2025:01559-1

SUSE-SU-2025:02283-1

SUSE-SU-2025:1559-1

SUSE-SU-2025_02283-1

USN-6558-1

Affected Products

Debian

Linuxmint

Suse

Ubuntu

Autofile Audio File Library

References · 47

• 🔥 https://github.com/mpruett/audiofile/issues/60 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2022-24599 · Security Note
• https://osv.dev/vulnerability/OESA-2026-2353 · Vendor Advisory
• https://osv.dev/vulnerability/UBUNTU-CVE-2022-24599 · Vendor Advisory
• https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/YZPG27YKICLIWUFOPVUOAFAZGOX4BNHY · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2025:1559-1 · Vendor Advisory
• https://osv.dev/vulnerability/openSUSE-SU-2025:15050-1 · Vendor Advisory
• https://osv.dev/vulnerability/MGASA-2023-0336 · Vendor Advisory
• https://security-tracker.debian.org/tracker/CVE-2022-24599 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2022-24599 · Vendor Advisory
• https://osv.dev/vulnerability/AZL-66563 · Vendor Advisory
• https://advisories.mageia.org/MGASA-2023-0336.html · Security Note
• https://lists.fedoraproject.org/archives/list/[e-mail]/message/WTETOUJNRR75REYJZTBGF6TAJZYTMXUY · Vendor Advisory
• https://ubuntu.com/security/CVE-2019-13147 · Vendor Advisory
• https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/WTETOUJNRR75REYJZTBGF6TAJZYTMXUY · Vendor Advisory