CVE-2026-123976

EUVD-2026-118395
EDFbrowser before 2.16 contains an out-of-bounds write vulnerability in check_edf_file() that allows attackers to overflow the 256-element annot_ch array by supplying excessive annotation signals. Attackers can craft an EDF+ or BDF+ file with more than 256 annotation signals to overwrite edfhdrblock members, including the signal parameter pointer, crashing the application when opened.
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTPrimary
5.5 MEDIUM
LOCAL
LOW
NONE
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
Awaiting analysis
This vulnerability is currently awaiting analysis.
Base Score
CVSS 3.x
EPSS Score
Percentile: Unknown
Debian logo
Debian Releases
Debian Product
Codename
edfbrowser
bookworm
vulnerable
forky
vulnerable
sid
vulnerable
trixie
vulnerable
Common Weakness Enumeration
References
https://gitlab.com/Teuniz/EDFbrowser
https://gitlab.com/Teuniz/EDFbrowser/-/blob/v2.15/check_edf_file.c#L686-L708
https://gitlab.com/Teuniz/EDFbrowser/-/blob/v2.15/global.h#L250
https://gitlab.com/Teuniz/EDFbrowser/-/commit/f64cec4a22af34adb7bbdf5fec12cb3a880ddc5a
https://gitlab.com/Teuniz/EDFbrowser/-/tags/v2.16
https://www.vulncheck.com/advisories/edfbrowser-before-2.16-out-of-bounds-write-via-check-edf-file-annotation-signals