CVE-2025-54481

A stack-based buffer overflow vulnerability exists in the MFER parsing functionality of The Biosig Project libbiosig 3.9.0 and Master Branch (35a819fa). A specially crafted MFER file can lead to arbitrary code execution. An attacker can provide a malicious file to trigger this vulnerability.This vulnerability manifests on line 8744 of biosig.c on the current master branch (35a819fa), when the Tag is 3: else if (tag==3) { // character code char v[17]; // [1] if (len>16) fprintf(stderr,"Warning MFER tag2 incorrect length %i>16\n",len); curPos += ifread(&v,1,len,hdr); v[len] = 0; In this case, the overflowed buffer is the newly-declared `v` \[1\] instead of `buf`. Since `v` is only 17 bytes large, much smaller values of `len` (even those encoded using a single octet) can trigger an overflow in this code path.

• CWE-121

• https://talosintelligence.com/vulnerability_reports/TALOS-2025-2234Exploit, Third Party Advisory
• https://www.talosintelligence.com/vulnerability_reports/TALOS-2025-2234

Published

Aug 25, 2025

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2025-54476Improper handling of input could lead to an XSS vector in th…4.8
• CVE-2025-54477Improper handling of authentication requests lead to a user …5.3
• CVE-2025-54478Mattermost Confluence Plugin version <1.5.0 fails to enforce…5.3
• CVE-2025-54479When a classification profile is configured on a virtual ser…8.7
• CVE-2025-5448Rejected reason: This CVE id was assigned but later discarde…
• CVE-2025-54480A stack-based buffer overflow vulnerability exists in the MF…9.8
• CVE-2025-54482A stack-based buffer overflow vulnerability exists in the MF…9.8
• CVE-2025-54483A stack-based buffer overflow vulnerability exists in the MF…9.8
• CVE-2025-54484A stack-based buffer overflow vulnerability exists in the MF…9.8
• CVE-2025-54485A stack-based buffer overflow vulnerability exists in the MF…9.8
• CVE-2025-54486A stack-based buffer overflow vulnerability exists in the MF…9.8
• CVE-2025-54487A stack-based buffer overflow vulnerability exists in the MF…9.8