Vulnerability Database

318,389

Total vulnerabilities in the database

CVE-2025-57107

Kitware VTK (Visualization Toolkit) through 9.5.0 contains a heap buffer overflow vulnerability in vtkGLTFDocumentLoader. When processing specially crafted GLTF files, the copy constructor of Accessor objects fails to properly validate buffer boundaries before performing memory read operations.

  • Published: Oct 31, 2025
  • Updated: Nov 6, 2025
  • CVE: CVE-2025-57107
  • Severity: High
  • Exploit:

CVSS v3:

  • Severity: High
  • Score: 7.1
  • AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:H

CWEs:

Software From Fixed in
vtk / vtk - 9.5.0.x