Stack-based Buffer Overflow in Biosig Project Libbiosig for Arbitrary Code Execution

CVE-2025-54481

What is CVE-2025-54481?

A vulnerability exists within the MFER parsing functionality of the Biosig Project's libbiosig, which could be exploited through a specially crafted MFER file. This stack-based buffer overflow occurs on line 8744 of biosig.c, specifically when handling a MFER tag value of 3. When the length of data exceeds the buffer size, an overflow situation arises, permitting attackers to execute arbitrary code on the affected system. Proper input validation and length checks are critical to mitigate this risk.

References