Cyber Resilience

CVE-2024-23313

CriticalPublic PoC

Published: 20 February 2024

Published
20 February 2024
Modified
04 November 2025
KEV Added
—
Patch
—
CVSS Score v3.1 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
EPSS Score 0.0162 82.2th percentile
Risk Priority 21 60% EPSS · 20% KEV · 20% CVSS

Summary

CVE-2024-23313 is a critical-severity Wrap or Wraparound (CWE-191) vulnerability in Libbiosig Project Libbiosig. Its CVSS base score is 9.8 (Critical).

Operationally, exploitation aligns with the MITRE ATT&CK technique Exploitation for Client Execution (T1203); ranked in the top 17.8% of CVEs by exploit likelihood; it is not currently listed in the CISA KEV catalog; a public proof-of-concept is referenced.

EU & UK References

Vulnerability details

An integer underflow vulnerability exists in the sopen_FAMOS_read functionality of The Biosig Project libbiosig 2.5.0 and Master Branch (ab0ee111). A specially crafted .famos file can lead to an out-of-bounds write which in turn can lead to arbitrary code execution. An…

more

attacker can provide a malicious file to trigger this vulnerability.

CWE(s)
CWE-191

Related Threats

MITRE ATT&CK Enterprise TechniquesAI

T1203 Exploitation for Client Execution Execution
Adversaries may exploit software vulnerabilities in client applications to execute code.
attack.mitre.org →
Why these techniques?

The integer underflow vulnerability in libbiosig's FAMOS file parser enables arbitrary code execution via a specially crafted .famos file, facilitating Exploitation for Client Execution in applications using the library such as Octave or Matlab.

Affected Assets

libbiosig project
libbiosig
2.5.0
fedoraproject
fedora
40

Mitigating Controls

No mitigating controls mapped yet. The per-CVE control annotator has not reached this CVE.

References