CVE-2025-34297

KissFFT contains an integer overflow in kiss_fft_alloc() (kiss_fft.c) on 32-bit platforms due to an unvalidated nfft in the size calculation (sizeof(kiss_fft_cpx) * (nfft - 1)). This can cause an undersized malloc and a subsequent loop to write nfft elements, resulting in a heap buffer overflow. ...