Vulnerabilities

TI-2025-35446 CVE-2025-57108 · GHSA-9frg-3876-q98g

Kitware VTK (Visualization Toolkit) through 9.5.0 contains a heap use-after-free…

HIGH 82

Kitware VTK (Visualization Toolkit) through 9.5.0 contains a heap use-after-free vulnerability in vtkGLTFDocumentLoader.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00395 Published 2025-10-31 No fix listed CWE-416

TI-2025-35445 CVE-2025-57107 · GHSA-6hj2-fxwr-rvj5

MEDIUM 64

Kitware VTK (Visualization Toolkit) through 9.5.0 contains a heap buffer overflow vulnerability in vtkGLTFDocumentLoader.

CVSS 3.1HIGH 7.1 Local No auth User interaction EPSS 0.0018 Published 2025-10-31 No fix listed CWE-122

TI-2025-35444 CVE-2025-57106 · GHSA-5pfc-43r5-qrmg

LOW 33

Kitware VTK (Visualization Toolkit) up to 9.5.0 is vulnerable to Buffer Overflow in vtkGLTFDocumentLoader.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00429 Published 2025-10-31 No fix listed CWE-122

TI-2021-18807 CVE-2021-42521 · GHSA-xfhg-9pjg-xg7g

LOW 36

There is a NULL pointer dereference vulnerability in VTK before 9.2.5, and it lies in IO/Infovis/vtkXMLTreeReader.cxx.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.01316 Published 2022-08-25 Fixed in 9.0.1 CWE-400