CVE-2025-66047

Several stack-based buffer overflow vulnerabilities exists in the MFER parsing functionality of The Biosig Project libbiosig 3.9.1. A specially crafted MFER file can lead to arbitrary code execution. An attacker can provide a malicious file to trigger these vulnerabilities.When Tag is 131

CVSS v3 9.8 CRITICAL

9.8^/10

CVSS v3 : CRITICAL

Vector :

Exploitability : 3.9 / Impact : 5.9

Attack Vector NETWORK

Attack Complexity LOW

Privileges Required NONE

User Interaction NONE

Confidentiality Impact HIGH

Integrity Impact HIGH

Availability Impact HIGH

Scope UNCHANGED

References

Link	Resource
https://talosintelligence.com/vulnerability_reports/TALOS-2025-2296	Exploit Third Party Advisory
https://talosintelligence.com/vulnerability_reports/TALOS-2025-2296	Exploit Third Party Advisory

Configurations

Configuration 1 (hide)

cpe:2.3:a:libbiosig_project:libbiosig:*:*:*:*:*:*:*:*

History

07 Oct 2026, 20:10

Type	Values Removed	Values Added
Summary		(es) Varias vulnerabilidades de desbordamiento de búfer basado en pila existen en la funcionalidad de análisis MFER de The Biosig Project libbiosig 3.9.1. Un archivo MFER especialmente diseñado puede conducir a la ejecución de código arbitrario. Un atacante puede proporcionar un archivo malicioso para activar estas vulnerabilidades. Cuando la etiqueta es 131

Information

Published : 2025-12-11 17:15

Updated : 2026-10-07 20:10

NVD link : CVE-2025-66047

Mitre link : CVE-2025-66047

CVE.ORG link : CVE-2025-66047

JSON object : View

Products Affected

libbiosig_project

libbiosig

CWE

CWE-121

Stack-based Buffer Overflow

CWE-787

Out-of-bounds Write

{"id": "CVE-2025-66047", "cveTags": [], "metrics": {"ssvcV203": [{"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "ssvcData": {"id": "CVE-2025-66047", "role": "CISA Coordinator", "options": [{"exploitation": "poc"}, {"automatable": "yes"}, {"technicalImpact": "total"}], "version": "2.0.3", "timestamp": "2025-12-11T19:20:12.862323Z"}}], "cvssMetricV31": [{"type": "Secondary", "source": "talos-cna@cisco.com", "cvssData": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 9.8, "attackVector": "NETWORK", "baseSeverity": "CRITICAL", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "integrityImpact": "HIGH", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "HIGH", "privilegesRequired": "NONE", "confidentialityImpact": "HIGH"}, "impactScore": 5.9, "exploitabilityScore": 3.9}]}, "affected": [{"source": "talos-cna@cisco.com", "affectedData": [{"vendor": "The Biosig Project", "product": "libbiosig", "versions": [{"status": "affected", "version": "3.9.1"}]}]}], "published": "2025-12-11T17:15:58.867", "references": [{"url": "https://talosintelligence.com/vulnerability_reports/TALOS-2025-2296", "tags": ["Exploit", "Third Party Advisory"], "source": "talos-cna@cisco.com"}, {"url": "https://talosintelligence.com/vulnerability_reports/TALOS-2025-2296", "tags": ["Exploit", "Third Party Advisory"], "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0"}], "vulnStatus": "Analyzed", "weaknesses": [{"type": "Secondary", "source": "talos-cna@cisco.com", "description": [{"lang": "en", "value": "CWE-121"}]}, {"type": "Primary", "source": "nvd@nist.gov", "description": [{"lang": "en", "value": "CWE-787"}]}], "descriptions": [{"lang": "en", "value": "Several stack-based buffer overflow vulnerabilities exists in the MFER parsing functionality of The Biosig Project libbiosig 3.9.1. A specially crafted MFER file can lead to arbitrary code execution. An attacker can provide a malicious file to trigger these vulnerabilities.When Tag is 131"}, {"lang": "es", "value": "Varias vulnerabilidades de desbordamiento de b\u00fafer basado en pila existen en la funcionalidad de an\u00e1lisis MFER de The Biosig Project libbiosig 3.9.1. Un archivo MFER especialmente dise\u00f1ado puede conducir a la ejecuci\u00f3n de c\u00f3digo arbitrario. Un atacante puede proporcionar un archivo malicioso para activar estas vulnerabilidades. Cuando la etiqueta es 131"}], "lastModified": "2026-10-07T20:10:01.970", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:a:libbiosig_project:libbiosig:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "2D3CD139-6F71-4B97-95A3-A52466FF6563", "versionEndExcluding": "3.9.2"}], "operator": "OR"}]}], "sourceIdentifier": "talos-cna@cisco.com"}