UBUNTU-CVE-2026-123976: Medium severity ubuntu/edfbrowser vulnerability
EDFbrowser before 2.16 contains an out-of-bounds write vulnerability in checkedffile() that allows attackers to overflow the 256-element annotch array by supplying excessive annotation signals. Attackers can craft an EDF+ or BDF+ file with more than 256 annotation signals to overwrite edfhdrblock members, including the signal parameter pointer, crashing the application when opened.
Affected Software
Event History
Frequently Asked Questions
What must an attacker provide to trigger the issue?
The attacker must supply a crafted EDF+ or BDF+ file containing more than 256 annotation signals. The vulnerability is triggered when EDFbrowser opens and processes that file.
Who is exposed to exploitation?
Users or systems that open untrusted EDF+ or BDF+ files in EDFbrowser versions before 2.16 are exposed. The described outcome is corruption of edfhdrblock members, including the signal parameter pointer, which can crash the application.
How can I determine whether a file is suspicious?
Inspect the EDF+ or BDF+ file for an excessive number of annotation signals. Files with more than 256 annotation signals match the condition described for triggering the out-of-bounds write.