Logo
vulnerabilityCVE-2025-56226
Name
CVE-2025-56226
Source
NVD ( link)Debian ( link)
Description
Libsndfile <=1.2.2 contains a memory leak vulnerability in the mpeg_l3_encoder_init() function within the mpeg_l3_encode.c file.
Published Date
Updated Date
Workaround
-

Analysis#


Affected Component
Analysis
libsndfile1
Patched

Vulnerability Ratings#


5.3
CVSSv31
NaN
other

Others affected components#


Name
Project
Project Version
Version
Status
buildroot
2025.02.x
1.2.2
Exploitable
buildroot
master
1.2.2
Exploitable
openwrt
master
1.2.2-r3
Exploitable
openwrt
openwrt-25.12
1.2.2-r2
Exploitable
yocto
kirkstone
1.0.31
Not Affected
yocto
scarthgap
1.2.2
Patched

Resolved with patches#


libsndfile1 (yocto:master)

#
Title
Author
Resolve
1
Update sndfile-convert.c
Sisyphus-wang <43361974+Sisyphus-wang@users.noreply.github.com>
CVE-2025-56226
2
Update mpeg_l3_encode.c
Sisyphus-wang <43361974+Sisyphus-wang@users.noreply.github.com>
CVE-2025-56226

libsndfile1 (yocto:scarthgap)

#
Title
Author
Resolve
1
Update sndfile-convert.c
Sisyphus-wang <43361974+Sisyphus-wang@users.noreply.github.com>
CVE-2025-56226
2
Update mpeg_l3_encode.c
Sisyphus-wang <43361974+Sisyphus-wang@users.noreply.github.com>
CVE-2025-56226