Alerts This Week
Warning Icon 1 652
Alerts This Week
Warning Icon 1 652

openSUSE Leap 16.0 libsndfile Critical Memory Leak CVE 2026-20787-1

opensuse
Calendar Grey May 25, 2026
Dist Opensuse Esm H88
Update resolves important issues for libsndfile in openSUSE, addressing critical flaws and bugs.
An update that solves 3 vulnerabilities and has 3 bug fixes can now be installed.

Description

This update for libsndfile fixes the following issues

- CVE-2025-52194: buffer overflow in the ircam_read_header function of file src/ircam.c when processing malformed IRCAM

audio files (bsc#1248458).

- CVE-2025-56226: memory leak in the `mpeg_l3_encoder_init()` function of `mpeg_l3_encode.c` (bsc#1256702).

- CVE-2026-37555: IMA-ADPCM integer overflow (bsc#1263695).

Changes for libsndfile:

Patch instructions:

To install this openSUSE security update use the suse recommended installation methods

like YaST online_update or "zypper patch".

Alternatively you can run the command listed for your product:

- openSUSE Leap 16.0

zypper in -t patch openSUSE-Leap-16.0-793=1

Topics%20covered

Topics Covered

security advisory buffer overflow important memory leak integer overflow OpenSUSE

Patch

Package List

- openSUSE Leap 16.0:

libsndfile-devel-1.2.2-160000.4.1

libsndfile-progs-1.2.2-160000.4.1

libsndfile1-1.2.2-160000.4.1

References

* bsc#1248458

* bsc#1256702

* bsc#1263695

References:

* https://www.suse.com/security/cve/CVE-2025-52194.html

* https://www.suse.com/security/cve/CVE-2025-56226.html

* https://www.suse.com/security/cve/CVE-2026-37555.html

Severity
important
Lowest
Low
Medium
High
Critical

Announcement ID: openSUSE-SU-2026:20787-1
Rating: important
Affected Products: openSUSE Leap 16.0 -------------------------------------------------------------

Topics%20covered

Topics Covered

security advisory buffer overflow important memory leak integer overflow OpenSUSE

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Your message here