KissFFT Integer Overflow Heap Buffer Overflow via kiss_fft_alloc

...

SUSE CVE-2025-34297

KissFFT versions prior to the fix commit 1b083165 contain an integer overflow in kissfftalloc in kissfft.c on platforms where sizet is 32-bit. The nfft parameter is not validated before being used in a size calculation sizeofkissfftcpx nfft - 1, which can wrap to a small value when nfft is large...

CVE-2025-34297

KissFFT contains an integer overflow in kiss_fft_alloc() (kiss_fft.c) on 32-bit platforms due to an unvalidated nfft in the size calculation (sizeof(kiss_fft_cpx) * (nfft - 1)). This can cause an undersized malloc and a subsequent loop to write nfft elements, resulting in a heap buffer overflow. ...

KISS FFT 输入验证错误漏洞

KISS FFT is a Fourier Transform computational library by mborgerding individual developers. An input validation error vulnerability exists in versions of KISS FFT prior to 1b083165, which stems from an integer overflow in the function kissfftalloc in kissfft.c, which could result in a heap buffer...