CVE-2025-48005CWE-122

A heap-based buffer overflow vulnerability exists in the RHS2000 parsing functionality of The Biosig Project libbiosig 3.9.0 and Master Branch (35a819fa)

Critical · published August 25, 2025

CVSS v3.1
9.8
EPSS
1%
Percentile
54.0
In the wild
Unconfirmed
What it is

🚨 A single crafted RHS2000 file is all it takes to unleash chaos! This critical buffer overflow vulnerability in libbiosig 3.9.0 could let attackers execute arbitrary code on your system. 🔥 Think of it like a delivery driver accepting a package without checking the contents — if the package is rigged to explode, the whole building is at risk! If exploited, an attacker could gain full control over your system, running any code they desire. This could lead to unauthorized data access, severe data loss, or even complete system compromise. The consequences could be absolutely devastating!

Put simply

Think of it like a delivery driver accepting a package without checking the contents — if the package is rigged to explode, the whole building is at risk! This heap-based buffer overflow allows attackers to manipulate memory in a way that permits arbitrary code execution when processing RHS2000 files. Essentially, it’s like providing a file that tricks the system into mismanaging its resources and running harmful instructions.

What to do

If exploited, an attacker could gain full control over your system, running any code they desire. This could lead to unauthorized data access, severe data loss, or even complete system compromise. The consequences could be absolutely devastating! Immediately patch libbiosig to version 3.9.1 or higher to close this vulnerability. Additionally, review any files from untrusted sources that may have been processed using the library. It's crucial to implement strict validation checks on incoming files. You've got this! Follow these steps to bolster your defenses and keep your systems safe. 🛡️

The record
Technical detail
CVSS v3.1
9.8 · CRITICAL
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.00738 · 54.0th percentile
Weakness
CWE-122 · Heap-based Buffer Overflow
Published
2025-08-25T13:53Z
EPSS history
Timeline
  • 25 AUG 13:53Z
    A heap-based buffer overflow vulnerability exists in the RHS2000 parsing functionality of The Biosig Project libbiosig 3.9.0 and Master Branch (35a819fa)
    cvelistv5