<?xml version='1.0' encoding='UTF-8'?>
<?xml-stylesheet href="/static/style.xsl" type="text/xsl"?>
<feed xmlns="http://www.w3.org/2005/Atom" xml:lang="en">
  <id>https://cve.radiocsirt.org/rss/recent/all/10</id>
  <title>Most recent entries from all</title>
  <updated>2026-10-07T08:01:29.040386+00:00</updated>
  <author>
    <name>Vulnerability-Lookup</name>
    <email>csirt@opendfir.org</email>
  </author>
  <link href="https://cve.radiocsirt.org" rel="alternate"/>
  <generator uri="https://lkiesow.github.io/python-feedgen" version="1.0.0">python-feedgen</generator>
  <subtitle>Contains only the most 10 recent entries.</subtitle>
  <entry>
    <id>https://cve.radiocsirt.org/vuln/cnvd-2025-20253</id>
    <title>cnvd-2025-20253</title>
    <updated>2026-10-07T08:01:29.046200+00:00</updated>
    <content>cnvd-2025-20253</content>
    <link href="https://cve.radiocsirt.org/vuln/cnvd-2025-20253"/>
  </entry>
  <entry>
    <id>https://cve.radiocsirt.org/vuln/euvd-2026-257564</id>
    <title>EUVD-2026-257564</title>
    <updated>2026-10-07T08:01:29.046237+00:00</updated>
    <content>EUVD-2026-257564</content>
    <link href="https://cve.radiocsirt.org/vuln/euvd-2026-257564"/>
  </entry>
  <entry>
    <id>https://cve.radiocsirt.org/vuln/fkie_cve-2025-54490</id>
    <title>fkie_cve-2025-54490</title>
    <updated>2026-10-07T08:01:29.046251+00:00</updated>
    <content type="xhtml">
      <div xmlns="http://www.w3.org/1999/xhtml">
        <p>A stack-based buffer overflow vulnerability exists in the MFER parsing functionality of The Biosig Project libbiosig 3.9.0 and Master Branch (35a819fa). A specially crafted MFER file can lead to arbitrary code execution. An attacker can provide a malicious file to trigger this vulnerability.This vulnerability manifests on line 9090 of biosig.c on the current master branch (35a819fa), when the Tag is 64:

                else if (tag==64)     //0x40
                {
                    // preamble
                    char tmp[256];  // [1]
                    curPos += ifread(tmp,1,len,hdr);

In this case, the overflowed buffer is the newly-declared `tmp` \[1\] instead of `buf`. While `tmp` is larger than `buf`, having a size of 256 bytes, a stack overflow can still occur in cases where `len` is encoded using multiple octets and is greater than 256.</p>
      </div>
    </content>
    <link href="https://cve.radiocsirt.org/vuln/fkie_cve-2025-54490"/>
  </entry>
  <entry>
    <id>https://cve.radiocsirt.org/vuln/ghsa-fq33-769w-5p63</id>
    <title>GHSA-fq33-769w-5p63</title>
    <updated>2026-10-07T08:01:29.046289+00:00</updated>
    <content type="xhtml">
      <div xmlns="http://www.w3.org/1999/xhtml"><p>A stack-based buffer overflow vulnerability exists in the MFER parsing functionality of The Biosig Project libbiosig 3.9.0 and Master Branch (35a819fa). A specially crafted MFER file can lead to arbitrary code execution. An attacker can provide a malicious file to trigger this vulnerability.This vulnerability manifests on line 9090 of biosig.c on the current master branch (35a819fa), when the Tag is 64:</p>
<p>else if (tag==64)     //0x40
                {
                    // preamble
                    char tmp[256];  // [1]
                    curPos += ifread(tmp,1,len,hdr);</p>
<p>In this case, the overflowed buffer is the newly-declared `tmp` \[1\] instead of `buf`. While `tmp` is larger than `buf`, having a size of 256 bytes, a stack overflow can still occur in cases where `len` is encoded using multiple octets and is greater than 256.</p></div>
    </content>
    <link href="https://cve.radiocsirt.org/vuln/ghsa-fq33-769w-5p63"/>
  </entry>
  <entry>
    <id>https://cve.radiocsirt.org/vuln/ubuntu-cve-2025-54490</id>
    <title>UBUNTU-CVE-2025-54490</title>
    <updated>2026-10-07T08:01:29.046312+00:00</updated>
    <content type="xhtml">
      <div xmlns="http://www.w3.org/1999/xhtml"><p><strong>Affected:</strong> Ubuntu:Pro:22.04:LTS: biosig, Ubuntu:Pro:24.04:LTS: biosig, Ubuntu:25.10: biosig, Ubuntu:Pro:26.04:LTS: biosig</p>
<p>A stack-based buffer overflow vulnerability exists in the MFER parsing functionality of The Biosig Project libbiosig 3.9.0 and Master Branch (35a819fa). A specially crafted MFER file can lead to arbitrary code execution. An attacker can provide a malicious file to trigger this vulnerability.This vulnerability manifests on line 9090 of biosig.c on the current master branch (35a819fa), when the Tag is 64:                 else if (tag==64)     //0x40                 {                     // preamble                     char tmp[256];  // [1]                     curPos += ifread(tmp,1,len,hdr); In this case, the overflowed buffer is the newly-declared `tmp` \[1\] instead of `buf`. While `tmp` is larger than `buf`, having a size of 256 bytes, a stack overflow can still occur in cases where `len` is encoded using multiple octets and is greater than 256.</p></div>
    </content>
    <link href="https://cve.radiocsirt.org/vuln/ubuntu-cve-2025-54490"/>
  </entry>
</feed>
