Null pointer dereference

There is a NULL pointer dereference vulnerability in VTK before 9.2.5, and it lies in IO/Infovis/vtkXMLTreeReader.cxx. The vendor didn't check the return value of libxml2 API 'xmlDocGetRootElement', and try to dereference it. It is unsafe as the return value can be NULL and that NULL pointer...

CVE-2021-42521

There is a NULL pointer dereference vulnerability in VTK before 9.2.5, and it lies in IO/Infovis/vtkXMLTreeReader.cxx. The vendor didn't check the return value of libxml2 API 'xmlDocGetRootElement', and try to dereference it. It is unsafe as the return value can be NULL and that NULL pointer...

CVE-2021-42521

There is a NULL pointer dereference vulnerability in VTK before 9.2.5, and it lies in IO/Infovis/vtkXMLTreeReader.cxx. The vendor didn't check the return value of libxml2 API 'xmlDocGetRootElement', and try to dereference it. It is unsafe as the return value can be NULL and that NULL pointer...

CVE-2021-42521

There is a NULL pointer dereference vulnerability in VTK before 9.2.5, and it lies in IO/Infovis/vtkXMLTreeReader.cxx. The vendor didn't check the return value of libxml2 API 'xmlDocGetRootElement', and try to dereference it. It is unsafe as the return value can be NULL and that NULL pointer...

CVE-2021-42521

VTK vulnerability CVE-2021-42521: a NULL pointer dereference in IO/Infovis/vtkXMLTreeReader.cxx due to the vendor not checking xmlDocGetRootElement’s return value. Affected: VTK before 9.2.5. Impact: possible crash of the application. Root cause: potential NULL dereference when parsing XML with l...

CVE-2021-42521

There is a NULL pointer dereference vulnerability in VTK before 9.2.5, and it lies in IO/Infovis/vtkXMLTreeReader.cxx. The vendor didn't check the return value of libxml2 API 'xmlDocGetRootElement', and try to dereference it. It is unsafe as the return value can be NULL and that NULL pointer...

CVE-2021-42521: Uncontrolled Resource Consumption

There is a NULL pointer dereference vulnerability in VTK before 9.2.5, and it lies in IO/Infovis/vtkXMLTreeReader.cxx. The vendor didn't check the return value of libxml2 API 'xmlDocGetRootElement', and try to dereference it. It is unsafe as the return value can be NULL and that NULL pointer...

USN-4852-1: VTK vulnerabilities

It was discovered that VTK incorrectly handled certain XML files in the embedded Expat library. An attacker could possibly use this issue to cause a denial of service or expose sensitive information...

vtk-moscow.ru XSS vulnerability

Open Bug Bounty ID: OBB-459221 Description| Value ---|--- Affected Website:| vtk-moscow.ru Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N Remediation Guide:| OWASP XSS Prevention Cheat She...

WS-2016-7081

In Kitware/VTK, version v4.2.0 to v7.1.1, there is a potential buffer overflow vulnerability in “vtkSTLReader.cxx”, due to an unbounded “fscanf” file read, which may allow an attacker to crash the program, or even execute arbitrary code on the system...

WS-2016-7083

In Kitware/VTK, version v3.2.0 to v7.1.1, there is a buffer overflow vulnerability, as a result of the program trying to capture input into destination array without checking its length first. This issue may allow an attacker to crash the program, or to execute arbitrary code on the system...

WS-2016-7082

In Kitware/VTK, version v4.2.5 to v7.1.1 the function “ReadASCIICellTopology” has a Buffer overrun vulnerability, due to the use of “strcmp” in a non secure manner, and insecure memory management using “char” instead of the c++ alternative- “std::strings”, that can result the program to crash or...