PT-2026-2857 · Unknown+1 · Libsndfile+1

Published 2026-01-14 · Updated 2026-03-15 · CVE-2025-56226

Positive Technologies (AI Summary)

CVSS v3.1

5.3

Medium

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L

Name of the Vulnerable Software and Affected Versions Libsndfile versions prior to 1.2.2

Description Libsndfile contains a memory leak issue in the mpeg l3 encoder init() function located within the mpeg l3 encode.c file. This issue can lead to a gradual consumption of system memory over time.

Recommendations Update to a version of Libsndfile greater than 1.2.2.

Exploit

Fix

DoS

Memory Leak

Weakness Enumeration

CWE-401

Related Identifiers

AZL-74855

CVE-2025-56226

OESA-2026-1603

OESA-2026-1604

OESA-2026-1605

OESA-2026-1606

OPENSUSE-SU-2026:10061-1

OPENSUSE-SU-2026:20787-1

SUSE-SU-2026:21826-1

Affected Products

Libsndfile

Red Os

References · 23

• 🔥 https://github.com/libsndfile/libsndfile/issues/1089 · Exploit
• 🔥 https://gist.github.com/Sisyphus-wang/f9e6e017b7d478bebee6e8187672abc8 · Exploit
• https://osv.dev/vulnerability/CVE-2025-56226 · Vendor Advisory
• https://osv.dev/vulnerability/AZL-74855 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2025-56226 · Security Note
• https://cve.org/CVERecord?id=CVE-2025-56226 · Security Note
• https://osv.dev/vulnerability/OESA-2026-1606 · Vendor Advisory
• https://osv.dev/vulnerability/UBUNTU-CVE-2025-56226 · Vendor Advisory
• https://osv.dev/vulnerability/openSUSE-SU-2026:10061-1 · Vendor Advisory
• https://osv.dev/vulnerability/OESA-2026-1603 · Vendor Advisory
• https://osv.dev/vulnerability/DEBIAN-CVE-2025-56226 · Vendor Advisory
• https://security-tracker.debian.org/tracker/CVE-2025-56226 · Vendor Advisory
• https://osv.dev/vulnerability/OESA-2026-1604 · Vendor Advisory
• https://osv.dev/vulnerability/OESA-2026-1605 · Vendor Advisory
• https://ubuntu.com/security/CVE-2025-56226 · Vendor Advisory