CVE-2025-66045CWE-121CWE-787

CVE-2025-66045

Critical · published December 11, 2025

CVSS v3.1
9.8
EPSS
1%
Percentile
45.0
In the wild
Unconfirmed
What it is

🚨 A maliciously crafted MFER file can exploit stack-based buffer overflows in libbiosig 3.9.1, leading to arbitrary code execution! 🔥 Think of this vulnerability as a recipe that allows a chef to sneak in harmful ingredients, resulting in a dish that could poison everyone at the table. If the parsing functionality doesn’t check what’s in the pot, any malicious file could wreak havoc! With this critical vulnerability, an attacker could gain complete control over the system, executing any code they desire. This could lead to devastating scenarios, such as stealing sensitive data, installing malware, or even shutting down critical services.

Put simply

Think of this vulnerability as a recipe that allows a chef to sneak in harmful ingredients, resulting in a dish that could poison everyone at the table. If the parsing functionality doesn’t check what’s in the pot, any malicious file could wreak havoc! This stack-based buffer overflow vulnerability in the MFER parsing functionality allows attackers to manipulate memory, potentially executing arbitrary code when a specially crafted MFER file is processed.

What to do

With this critical vulnerability, an attacker could gain complete control over the system, executing any code they desire. This could lead to devastating scenarios, such as stealing sensitive data, installing malware, or even shutting down critical services. To secure your systems, immediately upgrade to the patched version of libbiosig. Review and validate any files processed by the application to ensure they do not contain malicious payloads. Implement robust input validation to prevent these types of attacks in the future. You've got this! Follow these steps and you'll be one step closer to fortifying your security! 🛡️

The record
Technical detail
CVSS v3.1
9.8 · CRITICAL
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.00546 · 45.0th percentile
Weaknesses
CWE-121 · Stack-based Buffer Overflow; CWE-787 · Out-of-bounds Write
Published
2025-12-11T22:15Z
Affected products (1)
ProductVersionsFixed in
libbiosig_project/libbiosig< 3.9.23.9.2
References (2)
EPSS history
Timeline
  • 11 DEC 16:43Z
    Several stack-based buffer overflow vulnerabilities exists in the MFER parsing functionality of The Biosig Project libbiosig 3.9.1
    cvelistv5