CVEvulnerability

CVE-2025-57106

7.5 HIGH Published 2025-10-31 Modified 2026-06-17 Official page ↗
Status
Analyzed
Published
2025-10-31
Last modified
2026-06-17
Assigner
[email protected]
CVSS 3.1 (134c704f-9b21-4f2e-91b3-4a467353bcc0)
7.5 HIGH — CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Weaknesses
CWE-122

Description

Kitware VTK (Visualization Toolkit) up to 9.5.0 is vulnerable to Buffer Overflow in vtkGLTFDocumentLoader. The vulnerability occurs in the BufferDataExtractionWorker template function when processing GLTF accessor data.

Affected configurations

• vtk vtk (<= 9.5.0)

Related

Weakness · CWE (1)

  • CWE-122 Heap-based Buffer Overflow weakness

References