Summary
Mark Bereza and Lilith Wyatt discovered that BioSig incorrectly handled certain crafted input
files. An attacker could possibly use this issue to cause a denial of
service or execute arbitrary code. (CVE-2026-22891, CVE-2026-20777)
Fixed packages 3
| Release | Package | Fixed in |
|---|---|---|
| Ubuntu · Pro 22.04 LTS Pro:22.04:LTS | biosig | 2.3.3-1ubuntu0.1~esm1 |
| Ubuntu · Pro 24.04 LTS Pro:24.04:LTS | biosig | 2.6.0-1ubuntu1+esm1 |
| Ubuntu · Pro 26.04 LTS Pro:26.04:LTS | biosig | 3.9.0-1ubuntu0.1~esm1 |
Vulnerabilities 2
-
Critical 9.8
A heap-based buffer overflow vulnerability exists in the Intan CLP parsing functionality of The Biosig Project libbiosi…
-
High 8.1
A heap-based buffer overflow vulnerability exists in the Nicolet WFT parsing functionality of The Biosig Project libbio…