Threats tagged 'ghsa-cgqw-hrcf-pgqf'

A critical stack-based buffer overflow vulnerability exists in the MFER parsing functionality of The Biosig Project libbiosig version 3.9.0 and the current master branch. The flaw occurs when processing a specially crafted MFER file with a tag value of 3, leading to an overflow of a 17-byte buffer due to improper length checks. This can allow an attacker to execute arbitrary code by supplying a malicious file.