CVE-2026-8822

A flaw was found in the vtkDEMReader component of VTK. By processing a specially crafted Digital Elevation Model DEM file in the ReadProfiles function, an attacker can trigger a buffer overflow. This vulnerability leads to memory corruption, resulting in an application crash and a Denial of Servi...

CVE-2026-8824

A flaw was found in vtk. The image reader component, vtkBMPReader, improperly handles input boundaries, leading to a buffer overflow when processing bitmap BMP files. A remote attacker could exploit this vulnerability by providing a specially crafted BMP file, causing the application to crash and...

CVE-2026-9536

A flaw was found in vtk. A heap-based buffer overflow in the vtkWindBladeReader component allows an attacker to cause an application crash and a Denial of Service DoS by supplying a specially crafted .wind file...

CVE-2026-9536

A heap-based buffer overflow vulnerability exists in the vtkWindBladeReader FindVariableOffsets functionality of vtk versions: 9.6.1. A specially crafted .wind can lead to a buffer overflow. An attacker can provide a malicious file to trigger this vulnerability...

CVE-2026-8822

A memory corruption vulnerability exists in the vtkDEMReader ReadProfiles functionality of vtk versions: 9.6.1. A specially crafted USGS DEM can lead to a buffer overflow. An attacker can provide a malicious file to trigger this vulnerability...

CVE-2026-8824

A memory corruption vulnerability exists in the vtkBMPReader ExecuteDataWithInformation functionality of vtk versions: 9.6.1. A specially crafted .bmp file can lead to a buffer overflow. An attacker can provide a malicious file to trigger this vulnerability...

CVE-2026-41216

An invalid pointer dereference vulnerability exists in the vtkPNGReader::ExecuteInformation functionality of vtk version 9.6 . The root cause is a misuse of setjmp and longjmp within vtkPNGReader::vtkInternals::HandleLibPngError. When a malformed PNG file triggers a longjmp, the execution returns...

EUVD-2026-113326

An invalid pointer dereference vulnerability exists in the vtkPNGReader::ExecuteInformation functionality of vtk 9.6. A specially crafted .png file can lead to a denial of service. An attacker can provide a malicious file to trigger this vulnerability...

CVE-2026-8822

A memory corruption vulnerability exists in the vtkDEMReader ReadProfiles functionality of vtk (version 9.6.1) . The issue is caused by a heap-buffer-overflow (CWE-787) occurring because the software fails to validate consistency between the grid dimensions parsed from the Type A header and the p...

CVE-2026-42057

The vtk visualization toolkit (version 9.6 ) contains an invalid pointer dereference vulnerability in the vtkPNGReader::vtkPNGReaderUpdate2 functionality. The root cause is an incorrect error handling flow where setjmp is called within a helper function (HandleLibPngError) that returns before the...

CVE-2026-8822

A memory corruption vulnerability exists in the vtkDEMReader ReadProfiles functionality of vtk versions: 9.6.1. A specially crafted USGS DEM can lead to a buffer overflow. An attacker can provide a malicious file to trigger this vulnerability...

EUVD-2026-113325

An invalid pointer dereference vulnerability exists in the vtkPNGReader::vtkPNGReaderUpdate2 functionality of vtk 9.6. A specially crafted .png file can lead to a denial of service. An attacker can provide a malicious file to trigger this vulnerability...

EUVD-2026-113324

A memory corruption vulnerability exists in the vtkDEMReader ReadProfiles functionality of vtk versions: 9.6.1. A specially crafted USGS DEM can lead to a buffer overflow. An attacker can provide a malicious file to trigger this vulnerability...

EUVD-2026-113322

A out-of-bounds read vulnerability exists in the vtkChacoReader InputGraph2 functionality of vtk versions: 9.6.1. A specially crafted chaco can lead to an out-of-bounds read. An attacker can provide a malicious file to trigger this vulnerability...

CVE-2026-8824

A memory corruption vulnerability exists in the vtkBMPReader component of the vtk (version 9.6.1) software. The issue is caused by a heap-buffer-overflow occurring during the ExecuteDataWithInformation functionality. When the reader processes a specially crafted .bmp file with an unsupported bit ...

EUVD-2026-113323

A memory corruption vulnerability exists in the vtkBMPReader ExecuteDataWithInformation functionality of vtk versions: 9.6.1. A specially crafted .bmp file can lead to a buffer overflow. An attacker can provide a malicious file to trigger this vulnerability...

CVE-2026-8824

A memory corruption vulnerability exists in the vtkBMPReader ExecuteDataWithInformation functionality of vtk versions: 9.6.1. A specially crafted .bmp file can lead to a buffer overflow. An attacker can provide a malicious file to trigger this vulnerability...

CVE-2026-9535

The vtk library (version 9.6.1 ) contains an out-of-bounds read vulnerability within the vtkChacoReader InputGraph2 functionality. The root cause is a design flaw where the reader fails to verify that neighbor vertex IDs extracted from a .graph file fall within the valid range of the allocated po...

CVE-2026-9536

A heap-based buffer overflow vulnerability exists in the vtkWindBladeReader FindVariableOffsets functionality of vtk versions: 9.6.1. A specially crafted .wind can lead to a buffer overflow. An attacker can provide a malicious file to trigger this vulnerability...

CVE-2026-9536

A heap-based buffer overflow exists in the vtkWindBladeReader component of vtk (version 9.6.1) within the FindVariableOffsets functionality. The vulnerability occurs because the software fails to validate the byteCount read from a binary data file during the information phase. A specially crafted...