CVE-2024-23606CWE-131

An out-of-bounds write vulnerability exists in the sopen_FAMOS_read functionality of The Biosig Project libbiosig 2.5.0 and Master Branch (ab0ee111)

Critical · published February 20, 2024

CVSS v3.1
9.8
EPSS
2%
Percentile
76.7
In the wild
Unconfirmed
What it is

🚨 An out-of-bounds write in libbiosig allows attackers to execute arbitrary code with just a crafted .famos file – a hacker's golden ticket! 🔥 Think of it like a movie theater where a patron sneaks in a special film reel that rewrites the entire show - chaos ensues as the projector plays the wrong footage, and the audience is none the wiser! If exploited, an attacker could gain full control over the system, potentially leading to data breaches, service disruption, or even taking down entire systems. This vulnerability could have absolutely devastating impacts on the integrity and security of your applications.

Put simply

Think of it like a movie theater where a patron sneaks in a special film reel that rewrites the entire show - chaos ensues as the projector plays the wrong footage, and the audience is none the wiser! The flaw exists in the sopen_FAMOS_read function of libbiosig, where a maliciously crafted .famos file can trigger an out-of-bounds write, allowing for arbitrary code execution on the affected system.

What to do

If exploited, an attacker could gain full control over the system, potentially leading to data breaches, service disruption, or even taking down entire systems. This vulnerability could have absolutely devastating impacts on the integrity and security of your applications. Immediate action is required! Upgrade to libbiosig version 2.5.1 or later to patch this critical vulnerability. If you're using the Master Branch, ensure that you pull the latest commits that include the fix. You've got this! By taking these steps, you can secure your applications and keep those hackers at bay! 🛡️

The record
Technical detail
CVSS v3.1
9.8 · CRITICAL
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.01679 · 76.7th percentile
Weakness
CWE-131 · Incorrect Calculation of Buffer Size
Published
2024-02-20T15:29Z
EPSS history
Timeline
  • 20 FEB 15:29Z
    An out-of-bounds write vulnerability exists in the sopen_FAMOS_read functionality of The Biosig Project libbiosig 2.5.0 and Master Branch (ab0ee111)
    cvelistv5