CVE-2024-22097

CRITICAL

The Biosig Project <2.5.0 - Use After Free

Title source: llm

Description

A double-free vulnerability exists in the BrainVision Header Parsing functionality of The Biosig Project libbiosig Master Branch (ab0ee111) and 2.5.0. A specially crafted .vdhr file can lead to arbitrary code execution. An attacker can provide a malicious file to trigger this vulnerability.

References (3)

[Exploit, Third Party Advisory] https://talosintelligence.com/vulnerability_reports/TALOS-2024-1917

[Mailing List] https://lists.fedoraproject.org/archives/list/[email protected]/message/OIRLGNQM33KAWVWP5RPMAPHWNP3IY5YW/

[Third Party Advisory] https://www.talosintelligence.com/vulnerability_reports/TALOS-2024-1917

Scores

CVSS v3 9.8

EPSS 0.0032

EPSS Percentile 55.1%

Attack Vector NETWORK

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Classification

CWE

CWE-415

Status published

Affected Products (2)

libbiosig_project/libbiosig

fedoraproject/fedora

Timeline

Published Feb 20, 2024

Tracked Since Feb 18, 2026