yocto ▾
›
master ▾
›
vulnerability
›
CVE-2025-56226
Component Overview
Vulnerability Overview
Name
CVE-2025-56226
Source
NVD (
link
)
Debian (
link
)
Description
Libsndfile <=1.2.2 contains a memory leak vulnerability in the mpeg_l3_encoder_init() function within the mpeg_l3_encode.c file.
CWEs
CWE-401
Published Date
Jan 14, 2026
Updated Date
Jun 17, 2026
Workaround
-
Advisories
https://gist.github.com/Sisyphus-wang/f9e6e017b7d478bebee6e8187672abc8
Exploit
https://github.com/libsndfile/libsndfile/issues/1089
Exploit
Analysis
#
Affected Component
Analysis
libsndfile1
Patched
Vulnerability Ratings
#
5.3
CVSSv31
NaN
other
Others affected components
#
Name
Project
Project Version
Version
Status
libsndfile
buildroot
2025.02.x
1.2.2
Exploitable
libsndfile
buildroot
master
1.2.2
Exploitable
libsndfile
openwrt
master
1.2.2-r3
Exploitable
libsndfile
openwrt
openwrt-25.12
1.2.2-r2
Exploitable
libsndfile1
yocto
kirkstone
1.0.31
Not Affected
libsndfile1
yocto
scarthgap
1.2.2
Patched
Resolved with patches
#
libsndfile1 (yocto:master)
#
Title
Author
Resolve
1
Update sndfile-convert.c
Sisyphus-wang <43361974+Sisyphus-wang@users.noreply.github.com>
CVE-2025-56226
2
Update mpeg_l3_encode.c
Sisyphus-wang <43361974+Sisyphus-wang@users.noreply.github.com>
CVE-2025-56226
libsndfile1 (yocto:scarthgap)
#
Title
Author
Resolve
1
Update sndfile-convert.c
Sisyphus-wang <43361974+Sisyphus-wang@users.noreply.github.com>
CVE-2025-56226
2
Update mpeg_l3_encode.c
Sisyphus-wang <43361974+Sisyphus-wang@users.noreply.github.com>
CVE-2025-56226