EUVD-2026-113322

A out-of-bounds read vulnerability exists in the vtkChacoReader InputGraph2 functionality of vtk versions: 9.6.1. A specially crafted chaco can lead to an out-of-bounds read. An attacker can provide a malicious file to trigger this vulnerability...

CVE-2026-9535

The vtk library (version 9.6.1 ) contains an out-of-bounds read vulnerability within the vtkChacoReader InputGraph2 functionality. The root cause is a design flaw where the reader fails to verify that neighbor vertex IDs extracted from a .graph file fall within the valid range of the allocated po...