Home / Vulnerability Intelligence / CVE-2026-20777

CVE-2026-20777 - Vulnerability Analysis

HighCVSS: 8.1

Last Updated: March 3, 2026

The Biosig Project libbiosig - Remote Code Execution

Published: March 3, 2026Updated: March 3, 2026Remote Exploitable

Overview

The Biosig Project libbiosig 3.9.2 and Master Branch contain a heap-based buffer overflow caused by improper parsing in Nicolet WFT functionality, letting attackers execute arbitrary code by providing a malicious .wft file.

Severity & Score

Severity: High

CVSS Score: 8.1

EPSS Score: 10.0%(Probability of exploitation in next 30 days)

Impact

Attackers can execute arbitrary code remotely by supplying a crafted .wft file, potentially leading to full system compromise.

Mitigation

Update to the latest version of libbiosig.

References

Social Media Activity(1 post)

TheHackerWire

@thehackerwire

Mar 3, 2026

🟠 CVE-2026-20777 - High (8.1) A heap-based buffer overflow vulnerability exists in the Nicolet WFT parsing functionality of The Biosig Project libbiosig 3.9.2 and Master Branch (db9a9a63). A specially crafted .wft file can lead to arbitrary code execution. An attacker can prov... 🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-20777/ #CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

View original post

Related Resources

Details

CVE ID: CVE-2026-20777
Severity: High
CVSS Score: 8.1
Type: buffer_overflow
Status: unconfirmed
EPSS: 10.0%
Social Posts: 1

CWE

CWE-122

CVSS Metrics

CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H

EPSS Score

10.0%Probability of exploitation in the next 30 days