Signal is active with 1 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
KissFFT before commit 8a8e66e contains an integer overflow vulnerability in the kiss_fftndr_alloc() function in kiss_fftndr.c where the allocation size calculation dimOther*(dimReal+2)*sizeof(kiss_fft_scalar) overflows signed 32-bit integer arithmetic before being widened to size_t, causing malloc() to allocate an undersized buffer. Attackers can trigger heap buffer overflow by providing crafted dimensions that cause the multiplication to exceed INT_MAX, allowing writes beyond the allocated buffer region when kiss_fftndr() processes the data.
Priority
LOW
Exploitation
NONE
PoC
NONE
Patch
AVAILABLE
Momentum
STABLE
| Date | Total | Labels |
|---|
| 2026-04-20 | 1 | General1 |
| 2026-04-21 | 2 | Disclosure2 |
| 2026-04-22 | 1 | Disclosure1 |
🚨 HIGH: CVE-2026-41445 (CVSS 8.8) - Integer overflow in KissFFT kiss_fftndr_alloc() leads to heap buffer overflow. Attackers can exploit via crafted dimensions causing undersized malloc(). Patch: commit 8a8e66e+ #CVE #PatchNow https://t.co/0UqQWEwmzW
Post summary
A high‑severity vulnerability (CVE‑2026‑41445) in KissFFT is disclosed with technical details, CVSS score, and an available patch commit.
🚨*CVE* CVE-2026-41445 KissFFT before commit 8a8e66e contains an integer overflow vulnerability in the kiss_fftndr_alloc() function in kiss_fftndr.c where the allocation size calculation di… https://www.cve.org/CVERecord?id=CVE-2026-41445 ----- Traducción: CVE-2026-41445 Kis… http://infoflow.cloud`
Post summary
The post announces CVE-2026-41445 as an integer overflow in KissFFT’s allocation function, providing a concise technical description and a link to the CVE record.
CVE-2026-41445 KissFFT before commit 8a8e66e contains an integer overflow vulnerability in the kiss_fftndr_alloc() function in kiss_fftndr.c where the allocation size calculation di… https://www.cve.org/CVERecord?id=CVE-2026-41445
Post summary
The post discloses an integer overflow vulnerability in KissFFT before commit 8a8e66e, pinpointing its location, but does not provide a PoC, exploit, or patch information.
CVE-2026-41445 Integer Overflow and Heap Buffer Overflow in KissFFT kiss_fftndr_alloc() Function https://vulmon.com/vulnerabilitydetails?qid=CVE-2026-41445
Post summary
The entry references CVE-2026-41445 and notes integer and heap buffer overflow vulnerabilities but offers no details on PoCs, exploits, patches, or active exploitation.