7.1Hoch
CVE-2025-57107
Beschreibung
Kitware VTK (Visualization Toolkit) through 9.5.0 contains a heap buffer overflow vulnerability in vtkGLTFDocumentLoader. When processing specially crafted GLTF files, the copy constructor of Accessor objects fails to properly validate buffer boundaries before performing memory read operations.
Schwachstellentyp (CWE):
CWE-122
Daten: CVE.org, NVD, CISA KEV, FIRST EPSS, Ubuntu. Wiedergegeben wie in der Quelle, auf Englisch.
Betroffene Produkte und Versionen
Referenzen und Patches
- https://gitlab.kitware.com/vtk/vtk/-/issues/19732 ExploitIssue TrackingThird Party Advisory
CPE-Treffer (NVD) (1)
cpe:2.3:a:vtk:vtk:*:*:*:*:*:*:*:*≤ 9.5.0