7.5Yüksek
CVE-2025-57106
Açıklama
Kitware VTK (Visualization Toolkit) up to 9.5.0 is vulnerable to Buffer Overflow in vtkGLTFDocumentLoader. The vulnerability occurs in the BufferDataExtractionWorker template function when processing GLTF accessor data.
Zayıflık türü (CWE):
CWE-122
Veri: CVE.org, NVD, CISA KEV, FIRST EPSS, Ubuntu. Bilgiler kaynaktaki haliyle, İngilizce yayımlanır.
Etkilenen ürünler ve sürümler
Kaynaklar ve yamalar
- https://gitlab.kitware.com/vtk/vtk/-/issues/19733 ExploitIssue TrackingThird Party Advisory
- https://gitlab.kitware.com/vtk/vtk/-/issues/19734 ExploitIssue TrackingThird Party Advisory
CPE eşleşmeleri (NVD) (1)
cpe:2.3:a:vtk:vtk:*:*:*:*:*:*:*:*≤ 9.5.0