7.1Yüksek
CVE-2025-57107
Açıklama
Kitware VTK (Visualization Toolkit) through 9.5.0 contains a heap buffer overflow vulnerability in vtkGLTFDocumentLoader. When processing specially crafted GLTF files, the copy constructor of Accessor objects fails to properly validate buffer boundaries before performing memory read operations.
Zayıflık türü (CWE):
CWE-122
Veri: CVE.org, NVD, CISA KEV, FIRST EPSS, Ubuntu. Bilgiler kaynaktaki haliyle, İngilizce yayımlanır.
Etkilenen ürünler ve sürümler
Kaynaklar ve yamalar
- https://gitlab.kitware.com/vtk/vtk/-/issues/19732 ExploitIssue TrackingThird Party Advisory
CPE eşleşmeleri (NVD) (1)
cpe:2.3:a:vtk:vtk:*:*:*:*:*:*:*:*≤ 9.5.0