Linuxsecurity KissFFT Vulnerabilities Lead to Denial of Service Risks
Article Content
- •KissFFT vulnerabilities could allow denial of service or arbitrary code execution.
- •Two CVEs identified: CVE-2025-34297 and CVE-2026-41445.
- •Affected users should update their systems to mitigate risks.
KissFFT, a mixed-radix Fast Fourier Transform library, has been found to contain vulnerabilities that could allow attackers to crash the software or execute arbitrary code. Specifically, issues were identified in how KissFFT handled large and multidimensional Fourier transform sizes on 32-bit architectures. Two CVEs have been reported: CVE-2025-34297, published on December 1, 2025, and CVE-2026-41445, published on April 20, 2026. Both vulnerabilities could lead to denial of service attacks. Users of affected systems are advised to update their software to mitigate these risks. The vulnerabilities affect various versions of the KissFFT tools available in Ubuntu 26.04 LTS and earlier. A standard system update is recommended to apply necessary patches. Ubuntu Pro users are provided with extended security coverage for these packages.
Ask AI about this cluster
Answers cite the sources they use
Timeline
More articles in this cluster (2)
Following this threat?
Track Ubuntu and CVE-2025-34297 in your own feed — you're alerted when they show up in new reporting, leak sites or exploitation.
Free account · no card needed
Continue Reading
Critical Cisco FMC Vulnerabilities Under Active Exploitation Cisco's Secure Firewall Management Center (FMC) Software has two critical vulnerabilities, CVE-2026-20079 and CVE-2026-20316, that are currently being exploited by state-sponsored and ransomware actors. CVE-2026-20079, rated 10.0 on the CVSS scale, allows unauthenticated remote attackers to bypass authentication and… 
BlueMoon Exploit Kit Targeting Chrome and Windows by Multiple State Actors A new exploit kit named BlueMoon has been rapidly adopted by at least four espionage groups, primarily linked to China, exploiting vulnerabilities in Google Chrome and Microsoft Windows. The first observed use of BlueMoon was on August 28, 2026, by the China-aligned threat actor TA412, with subsequent adoption by…