Description
Libsndfile <=1.2.2 contains a memory leak vulnerability in the mpeg_l3_encoder_init() function within the mpeg_l3_encode.c file.
References
https://gist.github.com/Sisyphus-wang/f9e6e017b7d478bebee6e8187672abc8
ExploitThird Party Advisory
https://github.com/libsndfile/libsndfile/issues/1089
ExploitIssue Tracking
Weaknesses
134c704f-9b21-4f2e-91b3-4a467353bcc0
Secondary
CWE-401
CVSS impact metrics
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L
5.3 · Medium
Information
Source identifier
Vulnerability status
Analyzed
Published
2026-01-14T15:15:56.873Z
1 month agoLast modified
2026-01-21T21:21:07.933Z
4 weeks ago