What is CVE-2025-57107?

CVE-2025-57107 is a high-severity vulnerability in Vtk, classified under Heap-based Buffer Overflow. CVSS score: 7.1/10. Published 2025-10-31.

How severe is CVE-2025-57107?

High severity. CVSS v3 base score is 7.1 out of 10.

Buffer overflow in Vtk

CVE-2025-57107

Kitware VTK (Visualization Toolkit) through 9.5.0 contains a heap buffer overflow vulnerability in vtkGLTFDocumentLoader. When processing specially crafted GLTF files, the copy constructor of Accessor objects fails to properly validate buffer boundaries before performing memory read operations.

Vulnerability class: Buffer Overflow

EPSS: 0.002 (6.4th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 7.1 (High). Vector: CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:H.

Affected products

Vtk
N/a — versions n/a

Weakness classification (CWE)

CWE-122 — Heap-based Buffer Overflow

References

cve@mitre.org (Exploit, Third Party Advisory, Issue Tracking)

Frequently asked questions

What is CVE-2025-57107?: CVE-2025-57107 is a high-severity vulnerability in Vtk, classified under Heap-based Buffer Overflow. CVSS score: 7.1/10. Published 2025-10-31.
How severe is CVE-2025-57107?: High severity. CVSS v3 base score is 7.1 out of 10.