PT-2025-48537 · Kissfft · Kissfft

Sajeeb Lohani · Published 2025-12-01 · Updated 2026-03-19 · CVE-2025-34297

Positive Technologies (AI Summary)

CVSS v4.0

8.6

High

Base vector

AV:L/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Name of the Vulnerable Software and Affected Versions KissFFT versions prior to commit 1b083165

Description The software contains an integer overflow in the kiss fft alloc() function within the kiss fft.c file. This occurs on 32-bit platforms where size t is 32-bit. The nfft parameter is not validated before being used in a size calculation, potentially wrapping to a small value when nfft is large. This leads to malloc() allocating an undersized buffer, and a subsequent initialization loop overwrites the buffer, resulting in a heap buffer overflow.

Recommendations Update to a version with commit 1b083165 or later.

Fix

RCE

Integer Overflow

Weakness Enumeration

CWE-190

Related Identifiers

CVE-2025-34297

Affected Products

Kissfft

References · 18

• https://github.com/mborgerding/kissfft/commit/1b08316582049c3716154caefc0deab8758506e3 · Patch
• https://osv.dev/vulnerability/UBUNTU-CVE-2025-34297 · Vendor Advisory
• https://cve.org/CVERecord?id=CVE-2025-34297 · Security Note
• https://osv.dev/vulnerability/CVE-2025-34297 · Vendor Advisory
• https://security-tracker.debian.org/tracker/CVE-2025-34297 · Vendor Advisory
• https://ubuntu.com/security/CVE-2025-34297 · Vendor Advisory
• https://osv.dev/vulnerability/DEBIAN-CVE-2025-34297 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2025-34297 · Security Note
• https://github.com/mborgerding/kissfft/issues/120 · Note
• https://vulncheck.com/advisories/kissfft-integer-overflow-heap-buffer-overflow · Note
• https://t.me/msrcreports/2502 · Telegram Post
• https://twitter.com/CVEnew/status/1995560036744266081 · Twitter Post
• https://t.me/CVEtracker/38568 · Telegram Post
• https://twitter.com/Cezar_H_Linux/status/2034625740394676468 · Twitter Post
• https://twitter.com/threatcluster/status/2034502677103587479 · Twitter Post