Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

nvd логотип

CVE-2025-57107

Опубликовано: 31 окт. 2025
Источник: nvd
CVSS3: 7.1
EPSS Низкий

Описание

Kitware VTK (Visualization Toolkit) through 9.5.0 contains a heap buffer overflow vulnerability in vtkGLTFDocumentLoader. When processing specially crafted GLTF files, the copy constructor of Accessor objects fails to properly validate buffer boundaries before performing memory read operations.

Ссылки

Уязвимые конфигурации

Конфигурация 1
cpe:2.3:a:vtk:vtk:*:*:*:*:*:*:*:*
Версия до 9.5.0 (включая)

EPSS

Процентиль: 5%
0.00021
Низкий

7.1 High

CVSS3

Дефекты

CWE-122

Связанные уязвимости

CVSS3: 7.1
ubuntu
3 месяца назад

Kitware VTK (Visualization Toolkit) through 9.5.0 contains a heap buffer overflow vulnerability in vtkGLTFDocumentLoader. When processing specially crafted GLTF files, the copy constructor of Accessor objects fails to properly validate buffer boundaries before performing memory read operations.

CVSS3: 7.1
debian
3 месяца назад

Kitware VTK (Visualization Toolkit) through 9.5.0 contains a heap buff ...

CVSS3: 7.1
github
3 месяца назад

Kitware VTK (Visualization Toolkit) through 9.5.0 contains a heap buffer overflow vulnerability in vtkGLTFDocumentLoader. When processing specially crafted GLTF files, the copy constructor of Accessor objects fails to properly validate buffer boundaries before performing memory read operations.

EPSS

Процентиль: 5%
0.00021
Низкий

7.1 High

CVSS3

Дефекты

CWE-122