Home / mailings

PDF

[USN-8745-1] KissFFT vulnerabilities

Posted on 10 September 2026
Ubuntu Security

==========================================================================Ubuntu Security Notice USN-8745-1
September 10, 2026

kissfft vulnerabilities
==========================================================================
A security issue affects these releases of Ubuntu and its derivatives:

- Ubuntu 26.04 LTS
- Ubuntu 24.04 LTS
- Ubuntu 22.04 LTS

Summary:

KissFFT could be made to crash or run programs if it received specially
crafted input.

Software Description:
- kissfft: Mixed-radix Fast Fourier Transform library

Details:

It was discovered that KissFFT incorrectly handled certain large Fourier
transform sizes on 32-bit architectures. An attacker could possibly use
this issue to cause KissFFT to crash, resulting in a denial of service, or
execute arbitrary code. (CVE-2025-34297)

It was discovered that KissFFT incorrectly handled certain multidimensional
Fourier transform sizes. An attacker could possibly use this issue to cause
KissFFT to crash, resulting in a denial of service, or execute arbitrary
code. (CVE-2026-41445)

Update instructions:

The problem can be corrected by updating your system to the following
package versions:

Ubuntu 26.04 LTS
kissfft-tools 131.1.0-4ubuntu0.1~esm1
Available with Ubuntu Pro

Ubuntu 24.04 LTS
kissfft-tools 131.1.0-3ubuntu0.1~esm1
Available with Ubuntu Pro

Ubuntu 22.04 LTS
kissfft-tools 131.1.0-2ubuntu0.1~esm1
Available with Ubuntu Pro

In general, a standard system update will make all the necessary changes.

References:
https://ubuntu.com/security/notices/USN-8745-1
CVE-2025-34297, CVE-2026-41445

--===============4905849064212572944==Content-Type: application/pgp-signature; name="signature.asc"
Content-Description: OpenPGP digital signature

 

TOP