CVE-2025-46411

A stack-based buffer overflow vulnerability exists in the MFER parsing functionality of The Biosig Project libbiosig 3.9.0 and Master Branch (35a819fa). A specially crafted MFER file can lead to arbitrary code execution. An attacker can provide a malicious file to trigger this vulnerability.

CVSS v3 8.1 HIGH

8.1^/10

CVSS v3 : HIGH

Vector :

Exploitability : 2.2 / Impact : 5.9

Attack Vector NETWORK

Attack Complexity HIGH

Privileges Required NONE

User Interaction NONE

Confidentiality Impact HIGH

Integrity Impact HIGH

Availability Impact HIGH

Scope UNCHANGED

References

Link	Resource
https://talosintelligence.com/vulnerability_reports/TALOS-2025-2236	Exploit Third Party Advisory

Configurations

Configuration 1 (hide)

cpe:2.3:a:libbiosig_project:libbiosig:3.9.0:*:*:*:*:*:*:*

History

26 Aug 2025, 21:13

Type	Values Removed	Values Added
CPE		cpe:2.3:a:libbiosig_project:libbiosig:3.9.0:::::::*
Summary		(es) Existe una vulnerabilidad de desbordamiento de búfer en la función de análisis MFER de The Biosig Project libbiosig 3.9.0 y Master Branch (35a819fa). Un archivo MFER especialmente manipulado puede provocar la ejecución de código arbitrario. Un atacante puede proporcionar un archivo malicioso para activar esta vulnerabilidad.
First Time		Libbiosig Project Libbiosig Project libbiosig
References	~~() https://talosintelligence.com/vulnerability_reports/TALOS-2025-2236 -~~	() https://talosintelligence.com/vulnerability_reports/TALOS-2025-2236 - Exploit, Third Party Advisory

25 Aug 2025, 14:15

Type	Values Removed	Values Added
New CVE

Information

Published : 2025-08-25 14:15

Updated : 2025-08-26 21:13

NVD link : CVE-2025-46411

Mitre link : CVE-2025-46411

CVE.ORG link : CVE-2025-46411

JSON object : View

Products Affected

libbiosig_project

libbiosig

CWE

CWE-121

Stack-based Buffer Overflow

{"id": "CVE-2025-46411", "cveTags": [], "metrics": {"cvssMetricV31": [{"type": "Secondary", "source": "talos-cna@cisco.com", "cvssData": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 8.1, "attackVector": "NETWORK", "baseSeverity": "HIGH", "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H", "integrityImpact": "HIGH", "userInteraction": "NONE", "attackComplexity": "HIGH", "availabilityImpact": "HIGH", "privilegesRequired": "NONE", "confidentialityImpact": "HIGH"}, "impactScore": 5.9, "exploitabilityScore": 2.2}, {"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 9.8, "attackVector": "NETWORK", "baseSeverity": "CRITICAL", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "integrityImpact": "HIGH", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "HIGH", "privilegesRequired": "NONE", "confidentialityImpact": "HIGH"}, "impactScore": 5.9, "exploitabilityScore": 3.9}]}, "published": "2025-08-25T14:15:31.437", "references": [{"url": "https://talosintelligence.com/vulnerability_reports/TALOS-2025-2236", "tags": ["Exploit", "Third Party Advisory"], "source": "talos-cna@cisco.com"}], "vulnStatus": "Analyzed", "weaknesses": [{"type": "Primary", "source": "talos-cna@cisco.com", "description": [{"lang": "en", "value": "CWE-121"}]}], "descriptions": [{"lang": "en", "value": "A stack-based buffer overflow vulnerability exists in the MFER parsing functionality of The Biosig Project libbiosig 3.9.0 and Master Branch (35a819fa). A specially crafted MFER file can lead to arbitrary code execution. An attacker can provide a malicious file to trigger this vulnerability."}, {"lang": "es", "value": "Existe una vulnerabilidad de desbordamiento de b\u00fafer en la funci\u00f3n de an\u00e1lisis MFER de The Biosig Project libbiosig 3.9.0 y Master Branch (35a819fa). Un archivo MFER especialmente manipulado puede provocar la ejecuci\u00f3n de c\u00f3digo arbitrario. Un atacante puede proporcionar un archivo malicioso para activar esta vulnerabilidad."}], "lastModified": "2025-08-26T21:13:53.330", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:a:libbiosig_project:libbiosig:3.9.0:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "F4968E85-9135-4E89-9880-47FB8CE7AB34"}], "operator": "OR"}]}], "sourceIdentifier": "talos-cna@cisco.com"}