CVE-2025-56226
Medium · 5.3CVSS
5.3
EPSS
0.4%
Published
Jan 14, 2026
CISA due date
—
The record
Libsndfile <=1.2.2 contains a memory leak vulnerability in the mpeg_l3_encoder_init() function within the mpeg_l3_encode.c file.
Affected packages
| Ecosystem | Package | Introduced | Fixed |
|---|---|---|---|
| openSUSE:Tumbleweed | libsndfile | 0 | 1.2.2-4.1 |
Related vulnerabilities
- CVE-2026-37555 An issue was discovered in libsndfile 1.2.2 IMA ADPCM codec. Also affects libsndfile
- CVE-2024-50612 libsndfile through 1.2.2 has an ogg_vorbis.c vorbis_analysis_wrote out-of-bounds read. Also affects libsndfile
- CVE-2022-33065 Multiple signed integers overflow in function au_read_header in src/au.c and in functions… Also affects libsndfile
- CVE-2021-4156 An out-of-bounds read flaw was found in libsndfile's FLAC codec functionality. Also affects libsndfile
- CVE-2017-14245 An out of bounds read in the function d2alaw_array() in alaw.c of libsndfile 1.0.28 may… Also affects libsndfile
- CVE-2017-12562 Heap-based Buffer Overflow in the psf_binheader_writef function in common.c in libsndfile… Also affects libsndfile
- CVE-2017-7585 In libsndfile before 1.0.28, an error in the "flac_buffer_copy()" function (flac.c) can… Also affects libsndfile
- CVE-2015-7805 Heap-based buffer overflow in libsndfile 1.0.25 allows remote attackers to have… Also affects libsndfile