Out-of-Bounds Write Vulnerability in EDFbrowser by Teuniz

CVE-2026-123976

What is CVE-2026-123976?

EDFbrowser, prior to version 2.16, is susceptible to an out-of-bounds write vulnerability which can be exploited through the check_edf_file() function. This flaw occurs when an attacker supplies excessive annotation signals, allowing them to overflow the 256-element annot_ch array. By crafting a malicious EDF+ or BDF+ file that includes more than 256 annotation signals, an attacker can overwrite critical parts of the application, such as the signal parameter pointer in the edfhdrblock, potentially causing the application to crash when the file is opened.

References