CVE-2025-57109

Kitware VTK Visualization Toolkit 9.5.0 is vulnerable to Heap Use-After-Free in vtkGLTFImporter::ImportActors. When processing GLTF files with invalid scene node references, the application accesses string members of mesh objects that have been previously freed during actor import operations...

CVE-2025-57109

Kitware VTK (Visualization Toolkit) 9.5.0 is vulnerable to a Heap Use-After-Free flaw in the vtkGLTFImporter::ImportActors function. The issue occurs when the application processes GLTF files containing invalid scene node references , causing it to access string members of mesh objects that were ...

CVE-2025-57109: Use After Free

Kitware VTK Visualization Toolkit 9.5.0 is vulnerable to Heap Use-After-Free in vtkGLTFImporter::ImportActors. When processing GLTF files with invalid scene node references, the application accesses string members of mesh objects that have been previously freed during actor import operations...

WS-2016-7081

In Kitware/VTK, version v4.2.0 to v7.1.1, there is a potential buffer overflow vulnerability in “vtkSTLReader.cxx”, due to an unbounded “fscanf” file read, which may allow an attacker to crash the program, or even execute arbitrary code on the system...

WS-2016-7083

In Kitware/VTK, version v3.2.0 to v7.1.1, there is a buffer overflow vulnerability, as a result of the program trying to capture input into destination array without checking its length first. This issue may allow an attacker to crash the program, or to execute arbitrary code on the system...

WS-2016-7082

In Kitware/VTK, version v4.2.5 to v7.1.1 the function “ReadASCIICellTopology” has a Buffer overrun vulnerability, due to the use of “strcmp” in a non secure manner, and insecure memory management using “char” instead of the c++ alternative- “std::strings”, that can result the program to crash or...