Back Ubuntu

USN-8713-1: BioSig vulnerabilities

Ubuntu • September 2, 2026

BioSig could be made to crash or run programs as your login if it opened a specially crafted file.

biosig - Open-source software library for biomedical signal processing

Mark Bereza and Lilith Wyatt discovered that BioSig incorrectly handled certain crafted input files. An attacker could possibly use this issue to cause a denial of service or execute arbitrary code. ( CVE-2026-22891 , CVE-2026-20777 )

In general, a standard system update will make all the necessary changes.

The problem can be corrected by updating your system to the following package versions:

Reduce your security exposure

Ubuntu Pro provides ten-year security coverage to 25,000+ packages in Main and Universe repositories, and it is free for up to five machines.

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

Critical BioSig Vulnerabilities in Ubuntu 26.04 LTS Discovered Two critical vulnerabilities (CVE-2026-22891, CVE-2026-20777) have been identified in the BioSig library, an open-source software for biomedical signal processing. Discovered by researchers Mark Bereza and Lilith Wyatt, these vulnerabilities allow an attacker to crash the application or execute arbitrary code by opening specially crafted files. Affected systems include Ubuntu 26.04 LTS and earlier versions, with updates available through Ubuntu Pro. Users are urged to apply standard system updates to mitigate risks. The vulnerabilities were published on March 3, 2026, and are now addressed in the latest package versions. The potential impact includes denial of service and unauthorized code execution, which could compromise system integrity. Current status indicates that patches are available, and users should update their systems immediately to prevent exploitation. 2 sources 46

Extracted Entities

Attack Types (1)

DDoS

CVEs (2)

CVE-2026-20777 CVE-2026-22891