CVE-2025-48964: Ewma Integer Overflow

An integer overflow can occur in the Exponential Weighted Moving Average (EWMA) calculation when multiplying a measurement value (such as a time delta) by a fixed-point scalar without first casting it to a 64-bit integer. If the time variable is abnormally large (e.g. via a spoofed zero timestamp), the multiplication will wrap around, yielding negative stati

Provally CuratedPublic repositoryMediumMedium confidenceVerifiedApache-2.0Cβ
greprules fetch cve-2025-48964-ewma-integer-overflow --engine opengrep

Description

An integer overflow can occur in the Exponential Weighted Moving Average (EWMA) calculation when multiplying a measurement value (such as a time delta) by a fixed-point scalar without first casting it to a 64-bit integer. If the time variable is abnormally large (e.g. via a spoofed zero timestamp), the multiplication will wrap around, yielding negative stati