Skip to main content

Libbiosig Project

Vendor security scorecard – 3 CVEs in the selected period

Period: 30d 90d 6m 1y All
Risk 38
3
CVEs
1
Critical
1
High
0
KEV
3
PoC
0
Unpatched C/H
66.7%
Patch Rate
0.1%
Avg EPSS

Severity Breakdown

CRITICAL
1
HIGH
1
MEDIUM
1
LOW
0

Monthly CVE Trend

Affected Products (2)

Top Risky CVEs

CVE Summary Severity CVSS EPSS Priority Signals
CVE-2026-22891 Heap overflow in libbiosig 3.9.2 Intan CLP parsing. PoC available. CRITICAL 9.8 0.1% 69
PoC
CVE-2026-20777 Arbitrary code execution in libbiosig 3.9.2 and Master Branch can be triggered by parsing malicious Nicolet WFT files through a heap buffer overflow in the WFT parsing functionality. An attacker can exploit this vulnerability by supplying a crafted .wft file to execute arbitrary code on affected systems. Public exploit code exists for this vulnerability, though no patch is currently available. HIGH 8.1 0.1% 61
PoC
CVE-2025-64736 An out-of-bounds read vulnerability exists in the ABF parsing functionality of The Biosig Project libbiosig 3.9.2 and Master Branch (5462afb0). A specially crafted .abf file can lead to an information leak. [CVSS 6.1 MEDIUM] MEDIUM 6.1 0.0% 51
PoC No patch

This site uses cookies essential for authentication and security. No tracking or analytics cookies are used. Privacy Policy