CVE-2025-54485 | BDVDB-2026-291049 Detail

Description#

A stack-based buffer overflow vulnerability exists in the MFER parsing functionality of The Biosig Project libbiosig 3.9.0 and Master Branch (35a819fa). A specially crafted MFER file can lead to arbitrary code execution. An attacker can provide a malicious file to trigger this vulnerability.This vulnerability manifests on line 8785 of biosig.c on the current master branch (35a819fa), when the Tag is 8: else if (tag==8) { if (len>2) fprintf(stderr,"Warning MFER tag8 incorrect length %i>2\n",len); curPos += ifread(buf,1,len,hdr);

Impact#

Weaknesses#

References#

Exploit#

History#

1. Version 12025-08-25Record published in the CVE List.
2. Version 22025-11-03Most recent update recorded in the CVE List.