CVE-2025-34297 KissFFT Integer Overflow Heap Buffer Overflow via kiss_fft_alloc

Api.Msrc.Microsoft • December 5, 2025

Share: View original

Information published.

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

Multiple Heap Buffer Overflow Vulnerabilities in Image Processing Libraries Recent vulnerabilities have been identified in image processing libraries, including a heap-based buffer overflow in libjpeg-turbo (CVE-2023-2804) that affects 12-bit lossless JPEG images, potentially leading to application crashes. Additionally, CVE-2016-9535 has been updated with affected software for Windows packages, and CVE-2025-34297 involves an integer overflow in KissFFT. These vulnerabilities may impact various applications that utilize these libraries. 23 sources 44

Extracted Entities

Attack Types (1)

Zero-day Exploit

CVEs (1)

Platforms (1)

Vulnerabilities (2)

KissFFT Heap Buffer Overflow KissFFT Integer Overflow