vtk

Records11All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical1CVSS 9.0–10.0

CVSS high10CVSS 7.0–8.9

Exploited now

vtk records in CISA KEV

No vtk vulnerabilities are listed in CISA KEV.

Products in the NVD configurations · select one to filter the records

4 records in Vtk · all components

TI-2025-35446 CVE-2025-57108 · GHSA-9frg-3876-q98g

HIGH 82

Kitware VTK (Visualization Toolkit) through 9.5.0 contains a heap use-after-free vulnerability in vtkGLTFDocumentLoader.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00395 Published 2025-10-31 No fix listed CWE-416

TI-2025-35445 CVE-2025-57107 · GHSA-6hj2-fxwr-rvj5

MEDIUM 64

Kitware VTK (Visualization Toolkit) through 9.5.0 contains a heap buffer overflow vulnerability in vtkGLTFDocumentLoader.

CVSS 3.1HIGH 7.1 Local No auth User interaction EPSS 0.0018 Published 2025-10-31 No fix listed CWE-122

TI-2021-18807 CVE-2021-42521 · GHSA-xfhg-9pjg-xg7g

LOW 36

There is a NULL pointer dereference vulnerability in VTK before 9.2.5, and it lies in IO/Infovis/vtkXMLTreeReader.cxx.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.01316 Published 2022-08-25 Fixed in 9.0.1 CWE-400

TI-2025-35444 CVE-2025-57106 · GHSA-5pfc-43r5-qrmg

LOW 33

Kitware VTK (Visualization Toolkit) up to 9.5.0 is vulnerable to Buffer Overflow in vtkGLTFDocumentLoader.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00429 Published 2025-10-31 No fix listed CWE-122