CVE-2024-21812

CriticalCVSS 9.8/10Last modified Jun 17, 2026

Description

An integer overflow vulnerability exists in the sopen_FAMOS_read functionality of The Biosig Project libbiosig 2.5.0 and Master Branch (ab0ee111). A specially crafted .famos file can lead to an out-of-bounds write which in turn can lead to arbitrary code execution. An attacker can provide a malicious file to trigger this vulnerability.

Metrics

CVSS 3.1 9.8/10CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-190

Affected software

No affected versions have been published.

Timeline

Published
Feb 20, 2024
Last modified
Jun 17, 2026
NVD status
Modified

Related CVEs from 2024

CVE-2024-218137.9Exposure of resource to wrong sphere in some Intel(R) DTT software installers may allow an authenticated user to potentially enable escalatiCVE-2024-218147.3Uncontrolled search path for some Intel(R) Chipset Device Software before version 10.1.19444.8378 may allow an authenticated user to potentiCVE-2024-218156.5Insufficiently protected credentials (CWE-522) for third party DVR integrations to the Command Centre Server are accessible to authenticatedCVE-2024-218165.5in OpenHarmony v4.0.0 and prior versions allow a local attacker cause information leak through improper preservation of permissions.CVE-2024-218186.7Uncontrolled search path in some Intel(R) PCM software before version 202311 may allow an authenticated user to potentially enable escalatioCVE-2024-21826.5A flaw was found in the Open Virtual Network (OVN). In OVN clusters where BFD is used between hypervisors for high availability, an attackerCVE-2024-218207.2Incorrect default permissions in some Intel(R) Xeon(R) processor memory controller configurations when using Intel(R) SGX may allow a privilCVE-2024-218218.0Multiple TP-LINK products allow a network-adjacent authenticated attacker with access to the product from the LAN port or Wi-Fi to execute aCVE-2024-218237.5Hardware logic with insecure de-synchronization in Intel(R) DSA and Intel(R) IAA for some Intel(R) 4th or 5th generation Xeon(R) processors CVE-2024-218245.3Improper authentication vulnerability in exists in multiple printers and scanners which implement Web Based Management provided by BROTHER ICVE-2024-218259.8A heap-based buffer overflow vulnerability exists in the GGUF library GGUF_TYPE_ARRAY/GGUF_TYPE_STRING parsing functionality of llama.cpp CoCVE-2024-218265.5in OpenHarmony v3.2.4 and prior versions allow a local attacker cause sensitive information leak through insecure storage.