Описание
Kitware VTK (Visualization Toolkit) up to 9.5.0 is vulnerable to Buffer Overflow in vtkGLTFDocumentLoader. The vulnerability occurs in the BufferDataExtractionWorker template function when processing GLTF accessor data.
Пакеты
| Пакет | Статус | Версия исправления | Релиз | Тип |
|---|---|---|---|---|
| vtk9 | fixed | 9.6.2+ds-1 | package | |
| vtk9 | no-dsa | trixie | package | |
| vtk9 | postponed | bookworm | package | |
| vtk9 | postponed | bullseye | package |
Примечания
https://gitlab.kitware.com/vtk/vtk/-/issues/19733
https://gitlab.kitware.com/vtk/vtk/-/issues/19734
Связанные уязвимости
Kitware VTK (Visualization Toolkit) up to 9.5.0 is vulnerable to Buffer Overflow in vtkGLTFDocumentLoader. The vulnerability occurs in the BufferDataExtractionWorker template function when processing GLTF accessor data.
Kitware VTK (Visualization Toolkit) up to 9.5.0 is vulnerable to Buffer Overflow in vtkGLTFDocumentLoader. The vulnerability occurs in the BufferDataExtractionWorker template function when processing GLTF accessor data.
Kitware VTK (Visualization Toolkit) up to 9.5.0 is vulnerable to Buffer Overflow in vtkGLTFDocumentLoader. The vulnerability occurs in the BufferDataExtractionWorker template function when processing GLTF accessor data.
ALT-PU-2026-4353: package `vtk` update to version 9.5.2-alt2