CVE-2025-64736

An out-of-bounds read vulnerability exists in the ABF parsing functionality of The Biosig Project libbiosig 3.9.2 and Master Branch (5462afb0). A specially crafted .abf file can lead to an information leak. An attacker can provide a malicious file to trigger this vulnerability.

• CWE-125

• https://talosintelligence.com/vulnerability_reports/TALOS-2025-2323Exploit, Third Party Advisory
• https://www.talosintelligence.com/vulnerability_reports/TALOS-2025-2323Exploit, Third Party Advisory

Published

Mar 3, 2026

Last Modified

Jun 17, 2026

Status

Analyzed

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2025-64729The vulnerability, if exploited, could allow an authenticate…8.2
• CVE-2025-6473A vulnerability, which was classified as problematic, was fo…6.1
• CVE-2025-64730Cross-site scripting vulnerability exists in SNC-CX600W all …6.1
• CVE-2025-64733An out-of-bounds read vulnerability exists in the EMF functi…7.1
• CVE-2025-64734Missing Release of Resource after Effective Lifetime (CWE-77…2.4
• CVE-2025-64735An out-of-bounds read vulnerability exists in the EMF functi…7.1
• CVE-2025-64738External control of file name or path in Zoom Workplace for …5.5
• CVE-2025-64739External control of file name or path in certain Zoom Client…7.5
• CVE-2025-6474A vulnerability has been found in code-projects Inventory Ma…9.8
• CVE-2025-64740Improper verification of cryptographic signature in the inst…7.8
• CVE-2025-64741Improper authorization handling in Zoom Workplace for Androi…9.8
• CVE-2025-64744OpenObserve is a cloud-native observability platform. In ver…3.5