Heap-Based Buffer Overflow in Biosig Project's Parsing Functionality

CVE-2026-20777

What is CVE-2026-20777?

A heap-based buffer overflow vulnerability has been identified in the WFT parsing functionality of the Libbiosig library. This flaw allows an attacker to exploit a specially crafted .wft file, potentially leading to arbitrary code execution on the affected system. By delivering a malicious file, a threat actor can manipulate the application's memory, posing significant security risks. Users and organizations relying on Libbiosig versions 3.9.2 and the Master Branch (db9a9a63) should take immediate action to mitigate exposure and protect their environments.

References