{"id":"CVE-2026-41445","summary":"KissFFT Integer Overflow Heap Buffer Overflow via kiss_fftndr_alloc()","details":"KissFFT before commit 8a8e66e contains an integer overflow vulnerability in the kiss_fftndr_alloc() function in kiss_fftndr.c where the allocation size calculation dimOther*(dimReal+2)*sizeof(kiss_fft_scalar) overflows signed 32-bit integer arithmetic before being widened to size_t, causing malloc() to allocate an undersized buffer. Attackers can trigger heap buffer overflow by providing crafted dimensions that cause the multiplication to exceed INT_MAX, allowing writes beyond the allocated buffer region when kiss_fftndr() processes the data.","modified":"2026-08-12T16:24:12.912168Z","published":"2026-04-20T16:18:50.371Z","related":["openSUSE-SU-2026:10591-1"],"database_specific":{"cna_assigner":"VulnCheck","cwe_ids":["CWE-122","CWE-190"],"osv_generated_from":"https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/41xxx/CVE-2026-41445.json","unresolved_ranges":[{"extracted_events":[{"fixed":"8a8e66e33d692bad1376fe7904d87d767730537f"}],"source":"AFFECTED_FIELD"}]},"references":[{"type":"ADVISORY","url":"https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/41xxx/CVE-2026-41445.json"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-41445"},{"type":"ADVISORY","url":"https://www.vulncheck.com/advisories/kissfft-integer-overflow-heap-buffer-overflow-via-kiss-fftndr-alloc"},{"type":"FIX","url":"https://github.com/mborgerding/kissfft/commit/8a8e66e33d692bad1376fe7904d87d767730537f"},{"type":"PACKAGE","url":"https://github.com/mborgerding/kissfft"}],"affected":[{"ranges":[{"type":"GIT","repo":"https://github.com/mborgerding/kissfft","events":[{"introduced":"0"},{"fixed":"8a8e66e33d692bad1376fe7904d87d767730537f"}],"database_specific":{"source":"REFERENCES"}}],"versions":["131.2.0","131.1.0","v131","v130"],"database_specific":{"source":"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-41445.json","vanir_signatures_modified":"2026-08-12T16:24:12Z","vanir_signatures":[{"signature_type":"Line","signature_version":"v1","source":"https://github.com/mborgerding/kissfft/commit/8a8e66e33d692bad1376fe7904d87d767730537f","target":{"file":"kiss_fftndr.c"},"deprecated":false,"digest":{"line_hashes":["147536932756445775229342920216281158393","195317209422996357385240082475635590032","267775573445338060984909732741795719683","178091359157177198578349014326397279234","245811059101749387687799323034072729078","102199740401441658407722625190370883925","284344877252887809980555894685250860920","305899992166676141688927440322904604091","337726967368677008992113971248837995458","5263652949932667262216518173665160239","282111944472882771483232957987243476335","3025723243634758147237660717924650925","241104178735996349301097174490358609976","23853285238568154970689727759561337414","248167469260282621451411102107925379729","125102119682793629622740896885361754601","40005889948297625036133242892281151304","98927631277339309557876005126045994795","107942006832601665832604407926839102478","43430501213149502389764200897924413636","246966201241814319430812142132757581478","226770942946280472037653466328429856395","6484790982801685326169253876314905434","56086732802902942013215009185931862258","336573835626943380003334670784647276714","107916311512377259192242772917363416175","174213898906087010896431189696762561141","222340612659445920366548587631062292728","85994965821549503310929692123318236238"],"threshold":0.9},"id":"CVE-2026-41445-21ebf0db"},{"id":"CVE-2026-41445-4f1c225c","signature_type":"Function","signature_version":"v1","source":"https://github.com/mborgerding/kissfft/commit/8a8e66e33d692bad1376fe7904d87d767730537f","target":{"file":"kiss_fftndr.c","function":"kiss_fftndr"},"deprecated":false,"digest":{"function_hash":"75013760158141583363308305794710775847","length":622}},{"deprecated":false,"digest":{"function_hash":"138058747889033224485620282394793558801","length":1140},"id":"CVE-2026-41445-6f3af9c8","signature_type":"Function","signature_version":"v1","source":"https://github.com/mborgerding/kissfft/commit/8a8e66e33d692bad1376fe7904d87d767730537f","target":{"function":"kiss_fftndr_alloc","file":"kiss_fftndr.c"}}]}}],"schema_version":"1.9.0","severity":[{"type":"CVSS_V4","score":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N"}]}