KissFFT versions prior to the fix commit 1b083165 contain an integer overflow in kiss_fft_alloc() in kiss_fft.c on platforms where size_t is 32-bit. The nfft parameter is not validated before being used in a size calculation (sizeof(kiss_fft_cpx) * (nfft - 1)), which can wrap to a small value when nfft is large. As a result, malloc() allocates an undersized buffer and the subsequent twiddle-factor initialization loop writes nfft elements, causing a heap buffer overflow. This vulnerability only affects 32-bit architectures.

The remote Fedora 43 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2026-55f82da186 advisory.

    Add patch to fix integer overflow on 32-bit in KissFFT (CVE-2025-34297)


Tenable has extracted the preceding description block directly from the Fedora security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Fedora 42 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2026-ff768f8e37 advisory.

    Add patch to fix integer overflow on 32-bit in KissFFT (CVE-2025-34297)


Tenable has extracted the preceding description block directly from the Fedora security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Fedora 43 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2026-291357abab advisory.

    Update to 131.2.0

Tenable has extracted the preceding description block directly from the Fedora security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Fedora 42 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2026-aeb63d9dfb advisory.

    Update to 131.2.0

Tenable has extracted the preceding description block directly from the Fedora security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Fedora 44 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2026-ecc754cb95 advisory.

    Update to 131.2.0

Tenable has extracted the preceding description block directly from the Fedora security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available.

  - KissFFT versions prior to the fix commit 1b083165 contain an integer overflow in kiss_fft_alloc() in     kiss_fft.c on platforms where size_t is 32-bit. The nfft parameter is not validated before being used in a     size calculation (sizeof(kiss_fft_cpx) * (nfft - 1)), which can wrap to a small value when nfft is large.
    As a result, malloc() allocates an undersized buffer and the subsequent twiddle-factor initialization loop     writes nfft elements, causing a heap buffer overflow. This vulnerability only affects 32-bit     architectures. (CVE-2025-34297)

Note that Nessus relies on the presence of the package as reported by the vendor.

ID	Name	Product	Family	Severity
303922	Fedora 43 : vtk (2026-55f82da186)	Nessus	Fedora Local Security Checks	high
303912	Fedora 42 : vtk (2026-ff768f8e37)	Nessus	Fedora Local Security Checks	high
302989	Fedora 43 : kiss-fft (2026-291357abab)	Nessus	Fedora Local Security Checks	high
302986	Fedora 42 : kiss-fft (2026-aeb63d9dfb)	Nessus	Fedora Local Security Checks	high
302920	Fedora 44 : kiss-fft (2026-ecc754cb95)	Nessus	Fedora Local Security Checks	high
302875	Linux Distros Unpatched Vulnerability : CVE-2025-34297	Nessus	Misc.	high

Detections

Analytics

CVE-2025-34297

high

Tenable Plugins

high

high

high

high

high

high