A use-after-free vulnerability exists in the sopen_FAMOS_read functionality of The Biosig Project libbiosig 2.5.0 and Master Branch (ab0ee111). A specially crafted .famos file can lead to arbitrary code execution. An attacker can provide a malicious file to trigger this vulnerability.
The vulnerability concerns improper memory management (CWE-416, CWE-825) during reading a file in FAMOS format by the sopen_FAMOS_read function. A pointer to a freed memory area is reused, allowing an attacker to control the program execution flow. To trigger the vulnerability, it is sufficient to provide the victim or application a specially crafted .famos file.
An attacker can lead to arbitrary code execution (RCE) in the context of an application using the libbiosig library, which may result in complete takeover control of the attacked system.
Patches available from the vendor should be applied in accordance with the references. Users of Fedora distribution should update the libbiosig package according to information published on the package-announce list. It is also recommended to restrict processing of .famos files from untrusted sources.
The Biosig Project libbiosig version 2.5.0 and Master branch (commit ab0ee111), as well as libbiosig packages available in Fedora Project Fedora.
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:HFedora Project Fedora
OSFedoraproject40Libbiosig Project Libbiosig
APPLibbiosig Project2.5.0
Related vulnerabilities
PHP CGI argument injection – RCE na Windows przez mechanizm Best-Fit
Type Confusion w V8 (Google Chrome) — RCE przez spreparowaną stronę HTML
Type Confusion w silniku V8 Chrome — zdalne wykonanie kodu (RCE)
Use-after-free w Google Chrome Visuals umożliwiający ucieczkę z sandbox
Integer overflow w Skia w Google Chrome — sandbox escape