Cyber Resilience

CVE-2024-23809

CriticalPublic PoC

Published: 20 February 2024

Published
20 February 2024
Modified
04 November 2025
KEV Added
—
Patch
—
CVSS Score v3.1 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
EPSS Score 0.0032 55.9th percentile
Risk Priority 20 60% EPSS · 20% KEV · 20% CVSS

Summary

CVE-2024-23809 is a critical-severity Double Free (CWE-415) vulnerability in Libbiosig Project Libbiosig. Its CVSS base score is 9.8 (Critical).

Operationally, exploitation aligns with the MITRE ATT&CK technique Exploitation for Client Execution (T1203); ranked in the top 44.1% of CVEs by exploit likelihood; it is not currently listed in the CISA KEV catalog; a public proof-of-concept is referenced.

EU & UK References

Vulnerability details

A double-free vulnerability exists in the BrainVision ASCII Header Parsing functionality of The Biosig Project libbiosig 2.5.0 and Master Branch (ab0ee111). A specially crafted .vdhr file can lead to arbitrary code execution. An attacker can provide a malicious file to…

more

trigger this vulnerability.

CWE(s)
CWE-415

Related Threats

MITRE ATT&CK Enterprise TechniquesAI

T1203 Exploitation for Client Execution Execution
Adversaries may exploit software vulnerabilities in client applications to execute code.
attack.mitre.org →
Why these techniques?

The double-free vulnerability (CVE-2024-23809) in libbiosig's BrainVision ASCII Header Parsing allows arbitrary code execution via a specially crafted .vhdr file processed by client applications using the library (e.g., Octave, Matlab tools), enabling Exploitation for Client Execution.

Affected Assets

libbiosig project
libbiosig
2.5.0
fedoraproject
fedora
40

Mitigating Controls

No mitigating controls mapped yet. The per-CVE control annotator has not reached this CVE.

References