What’s Vulnerable › Vulnerabilities

CVE-2025-56226

• Severity: medium (CVSS 5.3 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.4% probability of exploitation in the next 30 days
• Public exploit or detection template: yes
• Published: 2026-01-14 · updated 2026-06-17
• Weakness: CWE-401

Description

Libsndfile <=1.2.2 contains a memory leak vulnerability in the mpeg_l3_encoder_init() function within the mpeg_l3_encode.c file.

Affected products

• Flexera Software LLC libsndfile: from 1.1.0 through 1.2.2

References

• https://gist.github.com/Sisyphus-wang/f9e6e017b7d478bebee6e8187672abc8
• https://github.com/libsndfile/libsndfile/issues/1089

Get alerted when CVE-2025-56226 or the next vulnerability affects your stack