Back Linuxsecurity

Fedora 42 kiss-fft Important Update Integer Overflow Vuln 2026

Linuxsecurity •LinuxSecurity Advisories • March 19, 2026

KISS FFT - A mixed-radix Fast Fourier Transform based on the principle, "Keep It Simple, Stupid." There are many great fft libraries already around. Kiss FFT is not trying to be better than any of them. It only attempts to be a reasonably efficient, moderately useful FFT that can use fixed or floating data types and can be incorporated into someone's C program in a few minutes with trivial licensing. Update Information : Update to 131.2.0

KISS FFT - A mixed-radix Fast Fourier Transform based on the

principle, "Keep It Simple, Stupid."

There are many great fft libraries already around. Kiss FFT is

not trying to be better than any of them. It only attempts to be

a reasonably efficient, moderately useful FFT that can use fixed

or floating data types and can be incorporated into someone's C

program in a few minutes with trivial licensing.

* Mon Mar 9 2026 Guido Aulisi - 131.2.0-1 - Update to 131.2.0 - Fix for CVE-2025-34297 * Fri Jan 16 2026 Fedora Release Engineering - 131.1.0-10 - Rebuilt for * Thu Jul 24 2025 Fedora Release Engineering - 131.1.0-9 - Rebuilt for

[ 1 ] Bug #2405958 - kiss-fft-131.2.0 is available [ 2 ] Bug #2418142 - CVE-2025-34297 kiss-fft: KissFFT Integer Overflow Heap Buffer Overflow via kiss_fft_alloc [fedora-42] [ 3 ] Bug #2418145 - CVE-2025-34297 kiss-fft: KissFFT Integer Overflow Heap Buffer Overflow via kiss_fft_alloc [fedora-43]

This update can be installed with the "dnf" update program. Use su -c 'dnf upgrade --advisory FEDORA-2026-aeb63d9dfb' at the command line. For more information, refer to the dnf documentation available at

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

Critical Buffer Overflow Vulnerability in KISS FFT Affects Fedora 42 and 43 A critical buffer overflow vulnerability identified as CVE-2025-34297 affects the KISS FFT library used in Fedora 42 and 43. This vulnerability, which allows for an integer overflow heap buffer overflow via the kiss_fft_alloc function, was published on December 1, 2025. The issue has been addressed with the release of KISS FFT version 131.2.0, which includes a fix for the vulnerability. Users are advised to update their systems to mitigate potential exploitation risks. The update can be installed using the 'dnf' update program. The vulnerability impacts users of the KISS FFT library, particularly those running Fedora versions 42 and 43. The patch was made available on March 9, 2026. Security professionals should prioritize this update to prevent potential attacks exploiting this vulnerability. 3 sources 73

Extracted Entities

Companies (1)

Fedora

CVEs (1)

CVE-2025-34297