Summary
It was discovered that KissFFT incorrectly handled certain large Fourier
transform sizes on 32-bit architectures. An attacker could possibly use
this issue to cause KissFFT to crash, resulting in a denial of service, or
execute arbitrary code. (CVE-2025-34297)
It was discovered that KissFFT incorrectly handled certain multidimensional
Fourier transform sizes. An attacker could possibly use this issue to cause
KissFFT to crash, resulting in a denial of service, or execute arbitrary
code. (CVE-2026-41445)
Fixed packages 3
| Release | Package | Fixed in |
|---|---|---|
| Ubuntu · Pro 22.04 LTS Pro:22.04:LTS | kissfft | 131.1.0-2ubuntu0.1~esm1 |
| Ubuntu · Pro 24.04 LTS Pro:24.04:LTS | kissfft | 131.1.0-3ubuntu0.1~esm1 |
| Ubuntu · Pro 26.04 LTS Pro:26.04:LTS | kissfft | 131.1.0-4ubuntu0.1~esm1 |
Vulnerabilities 2
-
High 8.8
KissFFT Integer Overflow Heap Buffer Overflow via kiss_fftndr_alloc()
KissFFT before commit 8a8e66e contains an integer overflow vulnerability in the kiss_fftndr_alloc() function in kiss_fftndr.c where the allocation size calculation dimOther*(dimReal+2)*sizeof(kiss_fft_scalar) overflows signed 32-bit integer arithmetic before …
-
High 8.6
KissFFT Integer Overflow Heap Buffer Overflow via kiss_fft_alloc
KissFFT versions prior to the fix commit 1b083165 contain an integer overflow in kiss_fft_alloc() in kiss_fft.c on platforms where size_t is 32-bit. The nfft parameter is not validated before being used in a size calculation (sizeof(kiss_fft_cpx) * (nfft - 1)…