CVE-2025-66046

Several stack-based buffer overflow vulnerabilities exists in the MFER parsing functionality of The Biosig Project libbiosig 3.9.1. A specially crafted MFER file can lead to arbitrary code execution. An attacker can provide a malicious file to trigger these vulnerabilities.When Tag is 67

CVSS v3 9.8 CRITICAL

9.8^/10

CVSS v3 : CRITICAL

Vector :

Exploitability : 3.9 / Impact : 5.9

Attack Vector NETWORK

Attack Complexity LOW

Privileges Required NONE

User Interaction NONE

Confidentiality Impact HIGH

Integrity Impact HIGH

Availability Impact HIGH

Scope UNCHANGED

References

Link	Resource
https://talosintelligence.com/vulnerability_reports/TALOS-2025-2296	Exploit Third Party Advisory
https://talosintelligence.com/vulnerability_reports/TALOS-2025-2296	Exploit Third Party Advisory

Configurations

Configuration 1 (hide)

cpe:2.3:a:libbiosig_project:libbiosig:*:*:*:*:*:*:*:*

History

07 Oct 2026, 20:10

Type	Values Removed	Values Added
Summary		(es) Varias vulnerabilidades de desbordamiento de búfer basado en pila existen en la funcionalidad de análisis MFER de libbiosig 3.9.1 de The Biosig Project. Un archivo MFER especialmente diseñado puede conducir a la ejecución de código arbitrario. Un atacante puede proporcionar un archivo malicioso para activar estas vulnerabilidades. Cuando la etiqueta es 67

Information

Published : 2025-12-11 17:15

Updated : 2026-10-07 20:10

NVD link : CVE-2025-66046

Mitre link : CVE-2025-66046

CVE.ORG link : CVE-2025-66046

JSON object : View

Products Affected

libbiosig_project

libbiosig

CWE

CWE-121

Stack-based Buffer Overflow

CWE-787

Out-of-bounds Write

{"id": "CVE-2025-66046", "cveTags": [], "metrics": {"ssvcV203": [{"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "ssvcData": {"id": "CVE-2025-66046", "role": "CISA Coordinator", "options": [{"exploitation": "poc"}, {"automatable": "yes"}, {"technicalImpact": "total"}], "version": "2.0.3", "timestamp": "2025-12-11T19:20:19.763249Z"}}], "cvssMetricV31": [{"type": "Secondary", "source": "talos-cna@cisco.com", "cvssData": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 9.8, "attackVector": "NETWORK", "baseSeverity": "CRITICAL", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "integrityImpact": "HIGH", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "HIGH", "privilegesRequired": "NONE", "confidentialityImpact": "HIGH"}, "impactScore": 5.9, "exploitabilityScore": 3.9}]}, "affected": [{"source": "talos-cna@cisco.com", "affectedData": [{"vendor": "The Biosig Project", "product": "libbiosig", "versions": [{"status": "affected", "version": "3.9.1"}]}]}], "published": "2025-12-11T17:15:58.707", "references": [{"url": "https://talosintelligence.com/vulnerability_reports/TALOS-2025-2296", "tags": ["Exploit", "Third Party Advisory"], "source": "talos-cna@cisco.com"}, {"url": "https://talosintelligence.com/vulnerability_reports/TALOS-2025-2296", "tags": ["Exploit", "Third Party Advisory"], "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0"}], "vulnStatus": "Analyzed", "weaknesses": [{"type": "Secondary", "source": "talos-cna@cisco.com", "description": [{"lang": "en", "value": "CWE-121"}]}, {"type": "Primary", "source": "nvd@nist.gov", "description": [{"lang": "en", "value": "CWE-787"}]}], "descriptions": [{"lang": "en", "value": "Several stack-based buffer overflow vulnerabilities exists in the MFER parsing functionality of The Biosig Project libbiosig 3.9.1. A specially crafted MFER file can lead to arbitrary code execution. An attacker can provide a malicious file to trigger these vulnerabilities.When Tag is 67"}, {"lang": "es", "value": "Varias vulnerabilidades de desbordamiento de b\u00fafer basado en pila existen en la funcionalidad de an\u00e1lisis MFER de libbiosig 3.9.1 de The Biosig Project. Un archivo MFER especialmente dise\u00f1ado puede conducir a la ejecuci\u00f3n de c\u00f3digo arbitrario. Un atacante puede proporcionar un archivo malicioso para activar estas vulnerabilidades. Cuando la etiqueta es 67"}], "lastModified": "2026-10-07T20:10:01.970", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:a:libbiosig_project:libbiosig:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "2D3CD139-6F71-4B97-95A3-A52466FF6563", "versionEndExcluding": "3.9.2"}], "operator": "OR"}]}], "sourceIdentifier": "talos-cna@cisco.com"}