CVE-2025-66045 - Several stack-based buffer overflow vulnerabilities exists in the MFER parsing functionality of The Biosig Project libbiosig 3.9.1

Back Back to CVE browser

CRITICAL

Several stack-based buffer overflow vulnerabilities exists in the MFER parsing functionality of The Biosig Project libbiosig 3.9.1

Published Dec 11, 2025

9.8

CRITICAL

CVSS 3.1

EPSS 0.55%

Description

Several stack-based buffer overflow vulnerabilities exists in the MFER parsing functionality of The Biosig Project libbiosig 3.9.1. A specially crafted MFER file can lead to arbitrary code execution. An attacker can provide a malicious file to trigger these vulnerabilities.When Tag is 65

Affected products

Vendor The Biosig Project Product Libbiosig Default
n/a
- Version
  3.9.1
  Status
  affected
  Constraints
  -

Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).

Vendor

Product

Default status

Versions

The Biosig Project

Libbiosig

n/a

Version	Status	Constraints
3.9.1	affected	-

Remediation

No remediation recorded yet.

Weaknesses (2)

CWE-121

CWE-787

Out-of-bounds Write

References (2)

https://euvd.enisa.europa.eu/vulnerability/EUVD-2025-202762
Advisory
https://talosintelligence.com/vulnerability_reports/TALOS-2025-2296
exploitThird Party Advisory

Link	Providers	Tags
https://euvd.enisa.europa.eu/vulnerability/EUVD-2025-202762		Advisory
https://talosintelligence.com/vulnerability_reports/TALOS-2025-2296		exploitThird Party Advisory