Records11All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical1CVSS 9.0–10.0
CVSS high10CVSS 7.0–8.9
Exploited now
vtk records in CISA KEVNo vtk vulnerabilities are listed in CISA KEV.
Components
Products in the NVD configurations · select one to filter the recordsPriority HIGH 82
Kitware VTK (Visualization Toolkit) through 9.5.0 contains a heap use-after-free vulnerability in vtkGLTFDocumentLoader.
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.00395 · Published 2025-10-31 · No fix listed CWE-416
Priority MEDIUM 64
Kitware VTK (Visualization Toolkit) through 9.5.0 contains a heap buffer overflow vulnerability in vtkGLTFDocumentLoader.
CVSS 3.1HIGH 7.1· Local · No auth · User interaction · EPSS 0.0018 · Published 2025-10-31 · No fix listed CWE-122
Priority MEDIUM 41
A out-of-bounds read vulnerability exists in the vtkChacoReader InputGraph2 functionality of vtk (version(s): 9.6.1).
CVSS 3.1HIGH 8.2· Network · No auth · No interaction · EPSS 0.00258 · Published 2026-10-29 · No fix listed CWE-125
Priority LOW 39
An invalid pointer dereference vulnerability exists in the vtkPNGReader::vtkPNGReaderUpdate2 functionality of vtk 9.6.
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.00278 · Published 2026-10-29 · No fix listed CWE-825
Priority LOW 39
An invalid pointer dereference vulnerability exists in the vtkPNGReader::ExecuteInformation functionality of vtk 9.6.
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.00278 · Published 2026-10-29 · No fix listed CWE-825
Priority LOW 39
A heap-based buffer overflow vulnerability exists in the vtkWindBladeReader FindVariableOffsets functionality of vtk (version(s): 9.6.1).
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.00307 · Published 2026-10-29 · No fix listed CWE-122
Priority LOW 39
A memory corruption vulnerability exists in the vtkBMPReader ExecuteDataWithInformation functionality of vtk (version(s): 9.6.1).
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.00307 · Published 2026-10-29 · No fix listed CWE-787
Priority LOW 39
A memory corruption vulnerability exists in the vtkDEMReader ReadProfiles functionality of vtk (version(s): 9.6.1).
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.00307 · Published 2026-10-29 · No fix listed CWE-787
Priority LOW 38
A heap-based buffer overflow vulnerability exists in the vtkDICOMItem::FindDataElementOrInsert functionality of vtk-dicom (version(s): 9.5.2).
CVSS 3.1HIGH 8.1· Network · No auth · No interaction · EPSS 0.00491 · Published 2026-06-25 · No fix listed CWE-129
Priority LOW 36
There is a NULL pointer dereference vulnerability in VTK before 9.2.5, and it lies in IO/Infovis/vtkXMLTreeReader.cxx.
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.01316 · Published 2022-08-25 · Fixed in 9.0.1 CWE-400
Priority LOW 33
Kitware VTK (Visualization Toolkit) up to 9.5.0 is vulnerable to Buffer Overflow in vtkGLTFDocumentLoader.
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.00429 · Published 2025-10-31 · No fix listed CWE-122
THREATIST.IORead the docs