CVE-2025-54480CWE-121

A stack-based buffer overflow vulnerability exists in the MFER parsing functionality of The Biosig Project libbiosig 3.9.0 and Master Branch (35a819fa)

Critical · published August 25, 2025

CVSS v3.1
9.8
EPSS
1%
Percentile
53.1
In the wild
Unconfirmed
What it is

🚨 A crafty MFER file is the key to a stack-based buffer overflow in libbiosig 3.9.0, turning your software into a playground for attackers! 🔥 Think of it like a recipe that calls for one egg, but an unscrupulous chef sneaks in a dozen—suddenly, your dish is ruined, and who knows what else is being cooked up behind the scenes? With just one special file, an attacker could run arbitrary code on your system—imagine them waltzing in, taking control, and wreaking absolute havoc! Data breaches, unauthorized access, and system crashes could become your new reality.

Put simply

Think of it like a recipe that calls for one egg, but an unscrupulous chef sneaks in a dozen—suddenly, your dish is ruined, and who knows what else is being cooked up behind the scenes? This vulnerability exists in the MFER parsing functionality where a crafted MFER file can exploit a flaw on line 8719 of biosig.c, allowing for arbitrary code execution when the tag condition is met.

What to do

With just one special file, an attacker could run arbitrary code on your system—imagine them waltzing in, taking control, and wreaking absolute havoc! Data breaches, unauthorized access, and system crashes could become your new reality. To protect your system, upgrade to a patched version of libbiosig immediately and review the MFER file handling code for vulnerabilities. Ensure proper validation of file formats and lengths to prevent these sneaky attacks! Don't worry, security hero! With a few updates and code checks, you can lock this down and keep your systems safe. 🛡️

The record
Technical detail
CVSS v3.1
9.8 · CRITICAL
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.00713 · 53.1th percentile
Weakness
CWE-121 · Stack-based Buffer Overflow
Published
2025-08-25T13:53Z
EPSS history
Timeline
  • 25 AUG 13:53Z
    A stack-based buffer overflow vulnerability exists in the MFER parsing functionality of The Biosig Project libbiosig 3.9.0 and Master Branch (35a819fa)
    cvelistv5