Kurz gesagt
- CVE-2025-57107 ist eine Schwachstelle (HOCH (CVSS 7.1)) in vtk, vtk (vtk).
- Wahrscheinlichkeit einer Ausnutzung in den nächsten 30 Tagen (EPSS): 0.18%, höher als bei 7.6% aller Schwachstellen.
- Abhilfe: auf 9.5.1 oder neuer aktualisieren.
| Package | Affected versions | Patched versions |
|---|
| vtk PyPI | < 9.5.1
| 9.5.1
|
| vtk | ≤ 9.5.0
| No fix yet |
Description
Kitware VTK (Visualization Toolkit) through 9.5.0 contains a heap buffer overflow vulnerability in vtkGLTFDocumentLoader. When processing specially crafted GLTF files, the copy constructor of Accessor objects fails to properly validate buffer boundaries before performing memory read operations.
NVD description
Kitware VTK (Visualization Toolkit) through 9.5.0 contains a heap buffer overflow vulnerability in vtkGLTFDocumentLoader. When processing specially crafted GLTF files, the copy constructor of Accessor objects fails to properly validate buffer boundaries before performing memory read operations.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free