7.1Alta
CVE-2025-57107
Descripción
Kitware VTK (Visualization Toolkit) through 9.5.0 contains a heap buffer overflow vulnerability in vtkGLTFDocumentLoader. When processing specially crafted GLTF files, the copy constructor of Accessor objects fails to properly validate buffer boundaries before performing memory read operations.
Debilidad (CWE):
CWE-122
Datos: CVE.org, NVD, CISA KEV, FIRST EPSS, Ubuntu. Se publican tal como los indican las fuentes, en inglés.
Productos y versiones afectados
Referencias y parches
- https://gitlab.kitware.com/vtk/vtk/-/issues/19732 ExploitIssue TrackingThird Party Advisory
Coincidencias CPE (NVD) (1)
cpe:2.3:a:vtk:vtk:*:*:*:*:*:*:*:*≤ 9.5.0