CVE-2024-23606

CRITICAL

Libbiosig - Out-of-Bounds Write

Title source: rule

Description

An out-of-bounds write vulnerability exists in the sopen_FAMOS_read functionality of The Biosig Project libbiosig 2.5.0 and Master Branch (ab0ee111). A specially crafted .famos file can lead to arbitrary code execution. An attacker can provide a malicious file to trigger this vulnerability.

References (3)

[Exploit, Third Party Advisory] https://talosintelligence.com/vulnerability_reports/TALOS-2024-1925

[Mailing List, Third Party Advisory] https://lists.fedoraproject.org/archives/list/[email protected]/message/OIRLGNQM33KAWVWP5RPMAPHWNP3IY5YW/

[Third Party Advisory] https://www.talosintelligence.com/vulnerability_reports/TALOS-2024-1925

Scores

CVSS v3 9.8

EPSS 0.0028

EPSS Percentile 50.6%

Attack Vector NETWORK

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Classification

CWE

CWE-131 CWE-787

Status published

Affected Products (2)

libbiosig_project/libbiosig

fedoraproject/fedora

Timeline

Published Feb 20, 2024

Tracked Since Feb 18, 2026