Threats tagged 'ghsa-9wfq-rqg3-9fm2'

A critical stack-based buffer overflow vulnerability exists in the MFER parsing functionality of The Biosig Project libbiosig version 3.9.0 and the current master branch. This flaw occurs due to improper handling of the 'len' value in the parsing code, which can be exploited by a specially crafted MFER file to achieve arbitrary code execution. Both excessively large and very small 'len' values can trigger the overflow via different mechanisms, including integer underflow.