Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-6hj2-fxwr-rvj5

Опубликовано: 31 окт. 2025
Источник: github
Github: Не прошло ревью
CVSS3: 7.1

Описание

Kitware VTK (Visualization Toolkit) through 9.5.0 contains a heap buffer overflow vulnerability in vtkGLTFDocumentLoader. When processing specially crafted GLTF files, the copy constructor of Accessor objects fails to properly validate buffer boundaries before performing memory read operations.

Kitware VTK (Visualization Toolkit) through 9.5.0 contains a heap buffer overflow vulnerability in vtkGLTFDocumentLoader. When processing specially crafted GLTF files, the copy constructor of Accessor objects fails to properly validate buffer boundaries before performing memory read operations.

EPSS

Процентиль: 8%
0.0018
Низкий

7.1 High

CVSS3

Дефекты

CWE-122

Связанные уязвимости

CVSS3: 7.1
ubuntu
около 1 года назад

Kitware VTK (Visualization Toolkit) through 9.5.0 contains a heap buffer overflow vulnerability in vtkGLTFDocumentLoader. When processing specially crafted GLTF files, the copy constructor of Accessor objects fails to properly validate buffer boundaries before performing memory read operations.

CVSS3: 7.1
nvd
около 1 года назад

Kitware VTK (Visualization Toolkit) through 9.5.0 contains a heap buffer overflow vulnerability in vtkGLTFDocumentLoader. When processing specially crafted GLTF files, the copy constructor of Accessor objects fails to properly validate buffer boundaries before performing memory read operations.

CVSS3: 7.1
debian
около 1 года назад

Kitware VTK (Visualization Toolkit) through 9.5.0 contains a heap buff ...

CVSS3: 9.8
altlinux
6 месяцев назад

ALT-PU-2026-4353: package `vtk` update to version 9.5.2-alt2

EPSS

Процентиль: 8%
0.0018
Низкий

7.1 High

CVSS3

Дефекты

CWE-122