CVE-2025-57106

high

Description

Kitware VTK (Visualization Toolkit) up to 9.5.0 is vulnerable to Buffer Overflow in vtkGLTFDocumentLoader. The vulnerability occurs in the BufferDataExtractionWorker template function when processing GLTF accessor data.

References

https://gitlab.kitware.com/vtk/vtk/-/issues/19734

https://gitlab.kitware.com/vtk/vtk/-/issues/19733

https://euvd.enisa.europa.eu/vulnerability/EUVD-2025-37362

Details

Source: Mitre, NVD

Published: 2025-10-31

Updated: 2025-11-05

Risk Information

CVSS v2

Base Score: 7.8

Vector: CVSS2#AV:N/AC:L/Au:N/C:N/I:N/A:C

Severity: High

CVSS v3

Base Score: 7.5

Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H