CVE-2026-22891Disclosure(libbiosig_project / libbiosig)

LOWCVSS 9.8 · CRITICAL

Signal is active with 1 mentions in latest observed window

Immediate actions

  • Track advisory updates for patch or workaround availability

Recommended action window: Monitor and triage in normal cycle

NVD description

A heap-based buffer overflow vulnerability exists in the Intan CLP parsing functionality of The Biosig Project libbiosig 3.9.2 and Master Branch (db9a9a63). A specially crafted Intan CLP file can lead to arbitrary code execution. An attacker can provide a malicious file to trigger this vulnerability.

0.0/ 10 priority

Sources & remediation

Weakness type (CWE)
CWE-122

Priority

LOW

Exploitation

NONE

PoC

YES

Patch

NONE

Momentum

STABLE

Are you affected?

If you run products in this scope, you should treat this CVE as relevant to your environment.

  • libbiosig

Threat summary

  • 5 mentions across 2 observed days
  • Momentum state: stable

What's happening

  • Technical details provided in 5 signals
  • Disclosure: 5 classified signals
  • Peaked 1d ago at 4 mentions (2026-03-03); latest day: 1
  • 5 total mentions across 2 days

Affected systems

Products
libbiosig

1 version affected across 1 product

Deep dive

Activity timeline5 mentions / 2d
01234Mentions · 2026-03-03: 4Mentions · 2026-03-04: 1Technical Details · 2026-03-03: 4Technical Details · 2026-03-04: 103-0303-04
Signal classification1 categories
Disclosure
5100.0%
Referenced assets5 URLs
Classification over time
DateTotalLabels
2026-03-034
Disclosure4
2026-03-041
Disclosure1
Full discourse5 posts
  • maru@maru1151157
    Disclosure

    🚨 CVE-2026-22891 (CVSS: 9.8) libbiosigのIntan CLP解析機能にヒープベースのバッファオーバーフロー脆弱性。3.9.2およびMaster Branchで、悪意のあるCLPファイルにより任意コード実行可能。 https://maruomosquit.com/vulnerability/CVE-2026-22891/ #脆弱性 #セキュリティ

    Post summary

    The post announces CVE‑2026‑22891, a heap‑based buffer overflow in libbiosig’s Intan CLP parser with a CVSS of 9.8, noting that malicious CLP files can trigger arbitrary code execution, but provides no PoC, exploit, or patch details.

    00010476
    1.5K followersView on X
  • The Hacker Wire@TheHackerWire
    Disclosure

    🔴 CVE-2026-22891 - Critical A heap-based buffer overflow vulnerability exists in the Intan CLP parsing functionality of The Biosig Project libbiosig 3.9.2 and Master Branch (db9a9a63). A specially crafted Intan CLP ... https://www.thehackerwire.com/vulnerability/CVE-2026-22891/ https://t.co/Rr5Edu7cWL

    Post summary

    A heap-based buffer overflow vulnerability (CVE-2026-22891) has been disclosed in The Biosig Project libbiosig 3.9.2, with no mention of PoC, exploit, or patch.

    0001045
    121 followersView on X
  • CVEFind.com@CveFindCom
    Disclosure

    [CVE-2026-22891: CRITICAL] Critical heap-based buffer overflow vulnerability in libbiosig 3.9.2 allows arbitrary code execution. Attackers can exploit by sending a crafted Intan CLP file.#cve,CVE-2026-22891,#cybersecurity https://cvefind.com/CVE-2026-22891

    Post summary

    The post announces a critical heap‑based buffer overflow in libbiosig 3.9.2 that permits arbitrary code execution through crafted Intan CLP files, with no mention of PoC, exploit code, or patches.

    0000056
    593 followersView on X
  • Infoflowcloud@infoflowcloud
    Disclosure

    🚨*CVE* CVE-2026-22891 A heap-based buffer overflow vulnerability exists in the Intan CLP parsing functionality of The Biosig Project libbiosig 3.9.2 and Master Branch (db9a9a63). A special… https://www.cve.org/CVERecord?id=CVE-2026-22891 ----- Traducción: CVE-2026-22891 Exi… http://infoflow.cloud`

    Post summary

    The post announces CVE‑2026‑22891, a heap‑based buffer overflow in libbiosig 3.9.2, linking to the CVE record but providing no exploitation or mitigation details.

    0000035
    55 followersView on X
  • CVE@CVEnew
    Disclosure

    CVE-2026-22891 A heap-based buffer overflow vulnerability exists in the Intan CLP parsing functionality of The Biosig Project libbiosig 3.9.2 and Master Branch (db9a9a63). A special… https://www.cve.org/CVERecord?id=CVE-2026-22891

    Post summary

    The CVE-2026-22891 is a heap-based buffer overflow in the Intan CLP parsing of libbiosig 3.9.2, with no PoC, exploit, or patch mentioned.

    00000180
    56.6K followersView on X
CPE platform detail1 entries

1 of 1 entries

PartVendorProductVersionTarget SWTarget HW
Applibbiosig_projectlibbiosig3.9.2--

Explore more