Vtk Vtk vulnerabilities
🔔 Create alert RSS Version checker
Published CVEs affecting Vtk Vtk: 4 record(s), with affected versions and fixes.cpe:2.3:a:vtk:vtk
CVE-2026-22879
High · 8.1
CWE-129 Jun 25, 2026
A heap-based buffer overflow vulnerability exists in the…
A heap-based buffer overflow vulnerability exists in the vtkDICOMItem::FindDataElementOrInsert functionality of vtk-dicom (version(s): 9.5.2). A specially crafted DICOM file can lead to heap-based memory corruption. An attacker can provide a malicious file to trigger this vulnerability.
CVE-2025-57108
Critical · 9.8
CWE-416 Oct 31, 2025
Use After Free in Vtk
Kitware VTK (Visualization Toolkit) through 9.5.0 contains a heap use-after-free vulnerability in vtkGLTFDocumentLoader. The vulnerability manifests during mesh object copy operations where vector members are accessed after the underlying memory has been freed, specifically when handling GLTF files with corrupted or invalid mesh reference structures.
CVE-2025-57107
High · 7.1
CWE-122 Oct 31, 2025
Heap-based Buffer Overflow in Vtk
Kitware VTK (Visualization Toolkit) through 9.5.0 contains a heap buffer overflow vulnerability in vtkGLTFDocumentLoader. When processing specially crafted GLTF files, the copy constructor of Accessor objects fails to properly validate buffer boundaries before performing memory read operations.
CVE-2025-57106
High · 7.5
CWE-122 Oct 31, 2025
Heap-based Buffer Overflow in Vtk
Kitware VTK (Visualization Toolkit) up to 9.5.0 is vulnerable to Buffer Overflow in vtkGLTFDocumentLoader. The vulnerability occurs in the BufferDataExtractionWorker template function when processing GLTF accessor data.