CVE
CVE-2026-41445
CVE-2026-41445 kissfft
KissFFT before commit 8a8e66e contains an integer overflow vulnerability in the kissfftndralloc() function in kissfftndr.c where the allocation size calculation dimOther(dimReal+2)sizeof(kissfftscalar) overflows signed 32-bit integer arithmetic before being widened to sizet, causing malloc() to allocate an undersized buffer. Attackers can trigger heap buffer overflow by providing crafted dimensions that cause the multiplication to exceed INTMAX, allowing writes beyond the allocated buffer region when kissfftndr() processes the data.
Package Versions Affected
Package Version
patch Availability
No items found.
Automatically patch vulnerabilities without upgrading
Fix Without Upgrading
Detect compatible fix
Apply safe remediation
Fix with a single pull request
CVSS Version
Severity
Base Score
CVSS Version
Score Vector
C
H
U
8.7
-
4.0
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
C
H
U
-
C
H
U
-
Related Resources
No items found.
References
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-41445
Basic Information
Ecosystem
