Vulnerabilities

TI-2026-82708 CVE-2026-41216 · GHSA-3xgx-gqxq-wp6h

Invalid pointer dereference in VTK PNG reader causes denial of service

LOW 39

An invalid pointer dereference vulnerability exists in the vtkPNGReader::ExecuteInformation functionality of vtk 9.6.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00278 Published 2026-10-29 No fix listed CWE-825

TI-2026-82709 CVE-2026-42057 · GHSA-rx8m-434w-gmj7

Invalid pointer dereference in VTK PNG reader causes denial of service

LOW 39

An invalid pointer dereference vulnerability exists in the vtkPNGReader::vtkPNGReaderUpdate2 functionality of vtk 9.6.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00278 Published 2026-10-29 No fix listed CWE-825

TI-2026-82704 CVE-2026-8822 · GHSA-h3c7-h65p-r333

Buffer overflow in vtk vtkDEMReader via crafted USGS DEM files

LOW 39

A memory corruption vulnerability exists in the vtkDEMReader ReadProfiles functionality of vtk (version(s): 9.6.1).

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00307 Published 2026-10-29 No fix listed CWE-787

TI-2026-82705 CVE-2026-8824 · GHSA-4rfj-w3wg-f3pw

Out-of-bounds write in VTK BMP reader can corrupt memory

LOW 39

A memory corruption vulnerability exists in the vtkBMPReader ExecuteDataWithInformation functionality of vtk (version(s): 9.6.1).

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00307 Published 2026-10-29 No fix listed CWE-787

TI-2026-82706 CVE-2026-9535 · GHSA-fhxg-fr48-97cc

Out-of-bounds read in vtkChacoReader InputGraph2 in VTK

MEDIUM 41

A out-of-bounds read vulnerability exists in the vtkChacoReader InputGraph2 functionality of vtk (version(s): 9.6.1).

CVSS 3.1HIGH 8.2 Network No auth No interaction EPSS 0.00258 Published 2026-10-29 No fix listed CWE-125

TI-2026-82707 CVE-2026-9536 · GHSA-7643-hgrp-qw2p

Heap-based buffer overflow in VTK vtkWindBladeReader

LOW 39

A heap-based buffer overflow vulnerability exists in the vtkWindBladeReader FindVariableOffsets functionality of vtk (version(s): 9.6.1).

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00307 Published 2026-10-29 No fix listed CWE-122

TI-2026-18370 CVE-2026-22879 · GHSA-prp5-qv62-frpc

Improper array index validation in vtk

LOW 38

A heap-based buffer overflow vulnerability exists in the vtkDICOMItem::FindDataElementOrInsert functionality of vtk-dicom (version(s): 9.5.2).

CVSS 3.1HIGH 8.1 Network No auth No interaction EPSS 0.00491 Published 2026-06-25 No fix listed CWE-129

TI-2025-35446 CVE-2025-57108 · GHSA-9frg-3876-q98g

Kitware VTK (Visualization Toolkit) through 9.5.0 contains a heap use-after-free…

HIGH 82

Kitware VTK (Visualization Toolkit) through 9.5.0 contains a heap use-after-free vulnerability in vtkGLTFDocumentLoader.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00395 Published 2025-10-31 No fix listed CWE-416

TI-2025-35445 CVE-2025-57107 · GHSA-6hj2-fxwr-rvj5

Kitware VTK (Visualization Toolkit) through 9.5.0 contains a heap buffer overflow…

MEDIUM 64

Kitware VTK (Visualization Toolkit) through 9.5.0 contains a heap buffer overflow vulnerability in vtkGLTFDocumentLoader.

CVSS 3.1HIGH 7.1 Local No auth User interaction EPSS 0.0018 Published 2025-10-31 No fix listed CWE-122

TI-2025-35444 CVE-2025-57106 · GHSA-5pfc-43r5-qrmg

Kitware VTK (Visualization Toolkit) up to 9.5.0 is vulnerable to Buffer Overflow in…

LOW 33

Kitware VTK (Visualization Toolkit) up to 9.5.0 is vulnerable to Buffer Overflow in vtkGLTFDocumentLoader.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00429 Published 2025-10-31 No fix listed CWE-122

TI-2021-18807 CVE-2021-42521 · GHSA-xfhg-9pjg-xg7g

Uncontrolled resource consumption in vtk

LOW 36

There is a NULL pointer dereference vulnerability in VTK before 9.2.5, and it lies in IO/Infovis/vtkXMLTreeReader.cxx.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.01316 Published 2022-08-25 Fixed in 9.0.1 CWE-400

Vulnerabilities

Filters