CVE Catalog

CVE-2025-66043

Critical
Published: Translated: NVD NIST

Summary

Several stack-based buffer overflow vulnerabilities exist in the MFER parsing functionality of The Biosig Project libbiosig 3.9.1. A specially crafted MFER file can lead to arbitrary code execution. This vulnerability is triggered when Tag is 3.

Risk Assessment

Risk of arbitrary code execution on the machine processing a malicious MFER file, potentially leading to system compromise or data breach.

Recommendation

Update libbiosig to the latest available version and avoid opening untrusted MFER files.

Original NVD description (English source)

Several stack-based buffer overflow vulnerabilities exists in the MFER parsing functionality of The Biosig Project libbiosig 3.9.1. A specially crafted MFER file can lead to arbitrary code execution. An attacker can provide a malicious file to trigger these vulnerabilities.When Tag is 3

Vulnerability data from NVD (NIST) · CISA KEV · EPSS