Description
An integer underflow vulnerability exists in the sopen_FAMOS_read functionality of The Biosig Project libbiosig 2.5.0 and Master Branch (ab0ee111). A specially crafted .famos file can lead to an out-of-bounds write which in turn can lead to arbitrary code execution. An attacker can provide a malicious file to trigger this vulnerability.
Problem types
CWE-191: Integer Underflow (Wrap or Wraparound)
Product status
Master Branch (ab0ee111)
Credits
Discovered by Lilith >_> of Cisco Talos.
References
talosintelligence.com/vulnerability_reports/TALOS-2024-1922
lists.fedoraproject.org/...OIRLGNQM33KAWVWP5RPMAPHWNP3IY5YW/
www.talosintelligence.com/...ability_reports/TALOS-2024-1922
talosintelligence.com/vulnerability_reports/TALOS-2024-1922