{"id":"SUSE-SU-2026:21826-1","summary":"Security update for libsndfile","details":"This update for libsndfile fixes the following issues\n\n- CVE-2025-52194: buffer overflow in the ircam_read_header function of file src/ircam.c when processing malformed IRCAM\n  audio files (bsc#1248458).\n- CVE-2025-56226: memory leak in the `mpeg_l3_encoder_init()` function of `mpeg_l3_encode.c` (bsc#1256702).\n- CVE-2026-37555: IMA-ADPCM integer overflow (bsc#1263695).\n\nChanges for libsndfile:\n","modified":"2026-05-28T18:24:04.388340493Z","published":"2026-05-22T08:43:20Z","related":["CVE-2025-52194","CVE-2025-56226","CVE-2026-37555"],"upstream":["CVE-2025-52194","CVE-2025-56226","CVE-2026-37555"],"references":[{"type":"ADVISORY","url":"https://www.suse.com/support/update/announcement/2026/suse-su-202621826-1/"},{"type":"REPORT","url":"https://bugzilla.suse.com/1248458"},{"type":"REPORT","url":"https://bugzilla.suse.com/1256702"},{"type":"REPORT","url":"https://bugzilla.suse.com/1263695"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2025-52194"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2025-56226"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2026-37555"}],"schema_version":"1.7.5"}