CVE-2025-52461

An out-of-bounds read vulnerability exists in the Nex parsing functionality of The Biosig Project libbiosig 3.9.0 and Master Branch (35a819fa). A specially crafted .nex file can lead to an information leak. An attacker can provide a malicious file to trigger this vulnerability.

CVSS v3 8.2 HIGH

8.2^/10

CVSS v3 : HIGH

Vector :

Exploitability : 3.9 / Impact : 4.2

Attack Vector NETWORK

Attack Complexity LOW

Privileges Required NONE

User Interaction NONE

Confidentiality Impact LOW

Integrity Impact NONE

Availability Impact HIGH

Scope UNCHANGED

References

Link	Resource
https://talosintelligence.com/vulnerability_reports/TALOS-2025-2238	Exploit Third Party Advisory

Configurations

Configuration 1 (hide)

cpe:2.3:a:libbiosig_project:libbiosig:3.9.0:*:*:*:*:*:*:*

History

26 Aug 2025, 21:05

Type	Values Removed	Values Added
Summary		(es) Existe una vulnerabilidad de lectura fuera de los límites en la funcionalidad de análisis Nex de The Biosig Project libbiosig 3.9.0 y Master Branch (35a819fa). Un archivo .nex especialmente manipulado puede provocar una fuga de información. Un atacante puede proporcionar un archivo malicioso para activar esta vulnerabilidad.
First Time		Libbiosig Project libbiosig Libbiosig Project
References	~~() https://talosintelligence.com/vulnerability_reports/TALOS-2025-2238 -~~	() https://talosintelligence.com/vulnerability_reports/TALOS-2025-2238 - Exploit, Third Party Advisory
CPE		cpe:2.3:a:libbiosig_project:libbiosig:3.9.0:::::::*

25 Aug 2025, 14:15

Type	Values Removed	Values Added
New CVE

Information

Published : 2025-08-25 14:15

Updated : 2025-08-26 21:05

NVD link : CVE-2025-52461

Mitre link : CVE-2025-52461

CVE.ORG link : CVE-2025-52461

JSON object : View

Products Affected

libbiosig_project

libbiosig

CWE

CWE-125

Out-of-bounds Read

{"id": "CVE-2025-52461", "cveTags": [], "metrics": {"cvssMetricV31": [{"type": "Secondary", "source": "talos-cna@cisco.com", "cvssData": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 8.2, "attackVector": "NETWORK", "baseSeverity": "HIGH", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H", "integrityImpact": "NONE", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "HIGH", "privilegesRequired": "NONE", "confidentialityImpact": "LOW"}, "impactScore": 4.2, "exploitabilityScore": 3.9}, {"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 9.1, "attackVector": "NETWORK", "baseSeverity": "CRITICAL", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H", "integrityImpact": "NONE", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "HIGH", "privilegesRequired": "NONE", "confidentialityImpact": "HIGH"}, "impactScore": 5.2, "exploitabilityScore": 3.9}]}, "published": "2025-08-25T14:15:31.840", "references": [{"url": "https://talosintelligence.com/vulnerability_reports/TALOS-2025-2238", "tags": ["Exploit", "Third Party Advisory"], "source": "talos-cna@cisco.com"}], "vulnStatus": "Analyzed", "weaknesses": [{"type": "Primary", "source": "talos-cna@cisco.com", "description": [{"lang": "en", "value": "CWE-125"}]}], "descriptions": [{"lang": "en", "value": "An out-of-bounds read vulnerability exists in the Nex parsing functionality of The Biosig Project libbiosig 3.9.0 and Master Branch (35a819fa). A specially crafted .nex file can lead to an information leak. An attacker can provide a malicious file to trigger this vulnerability."}, {"lang": "es", "value": "Existe una vulnerabilidad de lectura fuera de los l\u00edmites en la funcionalidad de an\u00e1lisis Nex de The Biosig Project libbiosig 3.9.0 y Master Branch (35a819fa). Un archivo .nex especialmente manipulado puede provocar una fuga de informaci\u00f3n. Un atacante puede proporcionar un archivo malicioso para activar esta vulnerabilidad."}], "lastModified": "2025-08-26T21:05:03.687", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:a:libbiosig_project:libbiosig:3.9.0:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "F4968E85-9135-4E89-9880-47FB8CE7AB34"}], "operator": "OR"}]}], "sourceIdentifier": "talos-cna@cisco.com"}