Signal is active with 4 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
KissFFT versions prior to the fix commit 1b083165 contain an integer overflow in kiss_fft_alloc() in kiss_fft.c on platforms where size_t is 32-bit. The nfft parameter is not validated before being used in a size calculation (sizeof(kiss_fft_cpx) * (nfft - 1)), which can wrap to a small value when nfft is large. As a result, malloc() allocates an undersized buffer and the subsequent twiddle-factor initialization loop writes nfft elements, causing a heap buffer overflow. This vulnerability only affects 32-bit architectures.
Priority
LOW
Exploitation
NONE
PoC
NONE
Patch
AVAILABLE
Momentum
NONE
Critical patch for kiss-fft on #Fedora 42/43 is out. Version 131.2.0 fixes CVE-2025-34297 (integer overflow -> heap buffer overflow). Read more: 👉 https://tinyurl.com/5n7n8p4b #Security https://t.co/FocmGWRuGU
Post summary
A critical patch (version 131.2.0) for kiss-fft on Fedora 42/43 has been released to fix CVE‑2025‑34297, an integer overflow that could result in a heap buffer overflow.
Critical patch for kiss-fft on #Fedora 42/43 is out. Version 131.2.0 fixes CVE-2025-34297 (integer overflow -> heap buffer overflow). If you're doing any FFT work, patch now. Read more: 👉 https://tinyurl.com/mthfkwba #Security https://t.co/X3yV9xNmig
Post summary
CVE‑2025‑34297 in kiss‑fft causes an integer‑overflow‑to‑heap‑buffer‑overflow vulnerability; a critical patch (v131.2.0) is available for Fedora 42/43, and users working with FFTs are urged to upgrade immediately.
🚨 #Fedora 43: Critical #KISSFFT update (131.2.0) fixes CVE-2025-34297. This integer overflow leads to a heap buffer overflow in kiss_fft_alloc(), risking RCE. Read more: 👉 https://tinyurl.com/y9wm42jp #Security https://t.co/SASLcqCBFK
Post summary
Fedora 43 update 131.2.0 patches CVE‑2025‑34297, an integer‑overflow RCE risk; no PoC or active exploitation details are provided.
CVE-2025-34297: Critical buffer overflow in KISS FFT used by Fedora 42 and 43, exploitable via kiss_fft_alloc; patched in v131.2.0, users should update with dnf. #Vulnerability https://threatcluster.io/cluster/critical-buffer-overflow-vulnerability-in-kiss-fft-affects-f-a379a6a8
Post summary
The tweet announces a critical buffer overflow in KISS FFT (CVE‑2025‑34297) affecting Fedora 42/43, highlights the vulnerable function kiss_fft_alloc, and advises users to update via dnf, without providing a PoC or evidence of active exploitation.