CVE-2025-56226

Libsndfile <=1.2.2 contains a memory leak vulnerability in the mpeg_l3_encoder_init() function within the mpeg_l3_encode.c file

Medium · published January 14, 2026

CVSS v3.1
5.3
EPSS
0%
Percentile
30.1
In the wild
Unconfirmed
What it is

Libsndfile <=1.2.2 contains a memory leak vulnerability in the mpeg_l3_encoder_init() function within the mpeg_l3_encode.c file.

The record
Technical detail
CVSS v3.1
5.3 · MEDIUM
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L
CVSS v4.0
Not supplied
EPSS
0.00374 · 30.1th percentile
Published
2026-01-14T00:00Z
EPSS history
Timeline
  • 14 JAN 00:00Z
    Libsndfile <=1.2.2 contains a memory leak vulnerability in the mpeg_l3_encoder_init() function within the mpeg_l3_encode.c file
    cvelistv5