What’s Vulnerable › Vulnerabilities
CVE-2025-57106
- Severity: high (CVSS 7.5 v3.1)
- Exploited in the wild: not listed in CISA KEV
- EPSS: 0.4% probability of exploitation in the next 30 days
- Public exploit or detection template: yes
- Published: 2025-10-31 · updated 2026-06-17
- Weakness: CWE-122
Description
Kitware VTK (Visualization Toolkit) up to 9.5.0 is vulnerable to Buffer Overflow in vtkGLTFDocumentLoader. The vulnerability occurs in the BufferDataExtractionWorker template function when processing GLTF accessor data.
Affected products
- vtk: through 9.5.0
References
Get alerted when CVE-2025-57106 or the next vulnerability affects your stack