The mborgerding kissfft library versions before commit 8a8e66e contain an integer overflow in the kiss_fftndr_alloc() function. Specifically, the calculation dimOther*(dimReal+2)*sizeof(kiss_fft_scalar) is performed using signed 32-bit arithmetic, which can overflow before being converted to size_t for malloc(). This results in an undersized buffer allocation. When kiss_fftndr() processes data with dimensions crafted to trigger this overflow, it can write beyond the allocated buffer, causing a heap buffer overflow vulnerability.

An attacker can exploit this vulnerability by providing specially crafted input dimensions that cause the integer overflow in the allocation size calculation. This leads to heap buffer overflow, which may result in memory corruption, application crashes, or potentially arbitrary code execution depending on the context of use. There are no known exploits in the wild at this time.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. No official fix or patch links are currently available. Users should monitor the mborgerding kissfft project for updates or commits addressing this issue. Until a patch is available, avoid processing untrusted input with vulnerable versions of kissfft or implement input validation to restrict dimension values to safe ranges.