CVE-2025-57107
BaseFortify
Publication date: 2025-10-31
Last updated on: 2025-11-05
Assigner: MITRE
Description
Description
CVSS Scores
EPSS Scores
| Probability: | |
| Percentile: |
Meta Information
Affected Vendors & Products
| Vendor | Product | Version / Range |
|---|---|---|
| vtk | vtk | to 9.5.0 (inc) |
Helpful Resources
Exploitability
| CWE ID | Description |
|---|---|
| CWE-122 | A heap overflow condition is a buffer overflow, where the buffer that can be overwritten is allocated in the heap portion of memory, generally meaning that the buffer was allocated using a routine such as malloc(). |
Attack-Flow Graph
AI Powered Q&A
Can you explain this vulnerability to me?
This vulnerability is a heap buffer overflow in the vtkGLTFDocumentLoader component of Kitware VTK up to version 9.5.0. It occurs because the copy constructor of Accessor objects does not properly validate buffer boundaries when processing specially crafted GLTF files, leading to out-of-bounds memory reads. [1]
How can this vulnerability impact me? :
The vulnerability can lead to a heap buffer overflow, which may cause application crashes or potentially allow an attacker to execute arbitrary code or cause denial of service by exploiting the improper memory handling during GLTF file processing. [1]