EDFbrowser before 2.16 contains an out-of-bounds write vulnerability in check_edf_file() that allows attackers to overflow the 256-element annot_ch array by supplying excessive annotation signals.
CVSS 4.0MEDIUM 6.8·Local·No auth·User interaction·EPSS 0.00121·Published 2026-11-06·Fixed in 2.16CWE-787
