What’s Vulnerable › Vulnerabilities

CVE-2025-57107

• Severity: high (CVSS 7.1 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.2% probability of exploitation in the next 30 days
• Public exploit or detection template: yes
• Published: 2025-10-31 · updated 2026-06-17
• Weakness: CWE-122

Description

Kitware VTK (Visualization Toolkit) through 9.5.0 contains a heap buffer overflow vulnerability in vtkGLTFDocumentLoader. When processing specially crafted GLTF files, the copy constructor of Accessor objects fails to properly validate buffer boundaries before performing memory read operations.

Affected products

• vtk: through 9.5.0

References

• https://gitlab.kitware.com/vtk/vtk/-/issues/19732

Get alerted when CVE-2025-57107 or the next vulnerability affects your stack