CVE-2025-52581CWE-190

An integer overflow vulnerability exists in the GDF parsing functionality of The Biosig Project libbiosig 3.9.0 and Master Branch (35a819fa)

Critical · published August 25, 2025

CVSS v3.1
9.8
EPSS
1%
Percentile
51.8
In the wild
Unconfirmed
What it is

🚨 An integer overflow vulnerability could let attackers execute arbitrary code by simply uploading a specially crafted GDF file. No need for flashy exploits—just a sneaky file! 🔥 Think of it like a delivery driver who blindly accepts a package without checking the label—if the package is full of harmful contents, the unsuspecting recipient is in big trouble! 📦 An attacker can leverage this vulnerability to gain complete control over the affected system, potentially leading to unauthorized access, data breaches, or even system devastation. The consequences could be absolutely devastating—imagine the chaos if malicious code runs freely!

Put simply

Think of it like a delivery driver who blindly accepts a package without checking the label—if the package is full of harmful contents, the unsuspecting recipient is in big trouble! 📦 This integer overflow vulnerability in the GDF parsing function of The Biosig Project libbiosig 3.9.0 occurs when the software improperly handles input size, allowing an attacker to craft a file that triggers arbitrary code execution.

What to do

An attacker can leverage this vulnerability to gain complete control over the affected system, potentially leading to unauthorized access, data breaches, or even system devastation. The consequences could be absolutely devastating—imagine the chaos if malicious code runs freely! Update to version 3.9.1 of libbiosig immediately to patch this vulnerability. If you're running from the Master Branch, ensure you're pulling the latest changes that address this issue. Always validate and sanitize inputs to protect against similar attacks in the future! You've got this! By following these steps, you’ll protect your system from potential harm and feel like a security hero! 🛡️

The record
Technical detail
CVSS v3.1
9.8 · CRITICAL
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.00680 · 51.8th percentile
Weakness
CWE-190 · Integer Overflow or Wraparound
Published
2025-08-25T13:53Z
EPSS history
Timeline
  • 25 AUG 13:53Z
    An integer overflow vulnerability exists in the GDF parsing functionality of The Biosig Project libbiosig 3.9.0 and Master Branch (35a819fa)
    cvelistv5