What is CVE-2025-57108?

CVE-2025-57108 is a critical-severity vulnerability in Vtk, classified under Use After Free. CVSS score: 9.8/10. Published 2025-10-31.

How severe is CVE-2025-57108?

Critical severity. CVSS v3 base score is 9.8 out of 10.

Use After Free in Vtk

CVE-2025-57108

Kitware VTK (Visualization Toolkit) through 9.5.0 contains a heap use-after-free vulnerability in vtkGLTFDocumentLoader. The vulnerability manifests during mesh object copy operations where vector members are accessed after the underlying memory has been freed, specifically when handling GLTF files with corrupted or invalid mesh reference structures.

Vulnerability class: Use-After-Free

EPSS: 0.004 (29.5th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 9.8 (Critical). Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H.

Affected products

Vtk
N/a — versions n/a

Weakness classification (CWE)

CWE-416 — Use After Free

References

cve@mitre.org (Exploit, Third Party Advisory, Issue Tracking)

Frequently asked questions

What is CVE-2025-57108?: CVE-2025-57108 is a critical-severity vulnerability in Vtk, classified under Use After Free. CVSS score: 9.8/10. Published 2025-10-31.
How severe is CVE-2025-57108?: Critical severity. CVSS v3 base score is 9.8 out of 10.