← All advisories

Medium severity5.3OSV Advisory· Published Jan 14, 2026· Updated Jun 17, 2026

CVE-2025-56226

CVE-2025-56226

Description

Libsndfile <=1.2.2 contains a memory leak vulnerability in the mpeg_l3_encoder_init() function within the mpeg_l3_encode.c file.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

4

Libsndfile Project/LibsndfileOSV3 versions
1.1.0, 1.2.0, 1.2.1, …+ 2 more
- (no CPE)range: 1.1.0, 1.2.0, 1.2.1, …
- cpe:2.3:a:libsndfile_project:libsndfile:*:*:*:*:*:*:*:*range: >=1.1.0,<=1.2.2
- (no CPE)range: <=1.2.2
osv-coords
pkg:rpm/opensuse/libsndfile&distro=openSUSE%20Tumbleweed
Range: < 1.2.2-4.1

Patches

Vulnerability mechanics

References

2

gist.github.com/Sisyphus-wang/f9e6e017b7d478bebee6e8187672abc8nvdExploitThird Party Advisory
github.com/libsndfile/libsndfile/issues/1089nvdExploitIssue Tracking

News mentions

0

No linked articles in our index yet.