Stack-Based Buffer Overflow in The Biosig Project Library by Biosig

CVE-2025-54490

What is CVE-2025-54490?

A stack-based buffer overflow vulnerability exists in the MFER parsing functionality of The Biosig Project's libbiosig, specifically impacting version 3.9.0 and the Master Branch (35a819fa). This flaw can be exploited when a specially crafted MFER file is provided by an attacker, potentially leading to arbitrary code execution. The vulnerability occurs due to improper handling of input sizes on line 9090 of biosig.c, where a 256-byte buffer, tmp, can overflow if the encoded length exceeds its capacity. This allows for unauthorized control over the execution flow, highlighting the importance of secure input validation in software development.

References