A critical integer overflow vulnerability in The Biosig Project libbiosig allows unauthenticated remote attackers to achieve arbitrary code execution.

The vulnerability exists within the GDF parsing logic. By providing a specially crafted GDF file, an unauthenticated attacker can trigger an integer overflow, leading to memory corruption and subsequent arbitrary code execution.

The CVSS score of 9.8 reflects the high potential for full system compromise. Successful exploitation grants an attacker the ability to execute code with the privileges of the application, potentially leading to unauthorized data access, complete system takeover, and significant disruption to research or clinical workflows relying on this software.

Immediate Action: Identify and decommission or isolate systems running vulnerable versions of libbiosig until an official patch is released by the vendor.

Proactive Monitoring: Inspect application logs for anomalous GDF file uploads or unexpected process crashes that may indicate exploitation attempts.

Compensating Controls: Implement file-type validation and sandboxing for all incoming GDF files to restrict the attack surface if immediate decommissioning is not possible.

Public Exploit Available: Unknown

Given the critical nature of this memory corruption vulnerability, immediate action is required. Organizations should prioritize identifying all instances of libbiosig and restrict the processing of untrusted GDF files until the vendor provides a verified patch.