CVE-2022-24599: Audiofile

Medium severity, CVSS 6.5. EPSS: 1.7% chance of exploitation in the next 30 days.

In autofile Audio File Library 0.3.6, there exists one memory leak vulnerability in printfileinfo, in printinfo.c, which allows an attacker to leak sensitive information via a crafted file. The printfileinfo function calls the copyrightstring function to get data, however, it dosn't use zero bytes to truncate the data.

Affected products

• Audiofile Audiofile: version 0.3.6 only
• Debian Debian Linux: version 10.0 only
• Fedoraproject Fedora: version 37 only; version 38 only; version 39 only

Published 2022-02-24. Last modified 2026-06-17.