CVE-2024-23809

CRITICAL

Libbiosig - Double Free

Title source: rule

Description

A double-free vulnerability exists in the BrainVision ASCII Header Parsing functionality of The Biosig Project libbiosig 2.5.0 and Master Branch (ab0ee111). A specially crafted .vdhr file can lead to arbitrary code execution. An attacker can provide a malicious file to trigger this vulnerability.

References (3)

[Exploit, Third Party Advisory] https://talosintelligence.com/vulnerability_reports/TALOS-2024-1919

[Mailing List, Third Party Advisory] https://lists.fedoraproject.org/archives/list/[email protected]/message/OIRLGNQM33KAWVWP5RPMAPHWNP3IY5YW/

[Third Party Advisory] https://www.talosintelligence.com/vulnerability_reports/TALOS-2024-1919

Scores

CVSS v3 9.8

EPSS 0.0032

EPSS Percentile 55.1%

Attack Vector NETWORK

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Classification

CWE

CWE-415

Status published

Affected Products (2)

libbiosig_project/libbiosig

fedoraproject/fedora

Timeline

Published Feb 20, 2024

Tracked Since Feb 18, 2026