CVE-2025-56226: Libsndfile Project Libsndfile

Medium severity, CVSS 5.3. EPSS: 0.4% chance of exploitation in the next 30 days.

Libsndfile <=1.2.2 contains a memory leak vulnerability in the mpeg_l3_encoder_init() function within the mpeg_l3_encode.c file.

Affected products

• Libsndfile Project Libsndfile: from 1.1.0, up to and including 1.2.2

Published 2026-01-14. Last modified 2026-06-17.