5.3

CVE-2025-56226

Exploit
Libsndfile <=1.2.2 contains a memory leak vulnerability in the mpeg_l3_encoder_init() function within the mpeg_l3_encode.c file.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Libsndfile Project ≫ Libsndfile Version >= 1.1.0 <= 1.2.2
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 0.31% 0.227
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
134c704f-9b21-4f2e-91b3-4a467353bcc0 5.3 3.9 1.4
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L
CWE-401 Missing Release of Memory after Effective Lifetime

The product does not sufficiently track and release allocated memory after it has been used, making the memory unavailable for reallocation and reuse.

https://github.com/libsndfile/libsndfile/issues/1089
Exploit
Issue Tracking
https://gist.github.com/Sisyphus-wang/f9e6e017b7d478bebee6e8187672abc8
Third Party Advisory
Exploit