Vtk

11 CVEs in 1 Vtk product, including Vtk. Newest: CVE-2026-9536 (2026-10-29). Severity, EPSS and public exploits for each.

Vtk products with known CVEs

ProductCVEs
Vtk11
Vtk CVEs — newest first
CVESeverityScorePublishedSummary
CVE-2026-9536High7.52026-10-29A heap-based buffer overflow vulnerability exists in the vtkWindBladeReader FindVariableOffsets functionality of vtk (version(s): 9.6.1). A specially crafted…
CVE-2026-9535High8.22026-10-29A out-of-bounds read vulnerability exists in the vtkChacoReader InputGraph2 functionality of vtk (version(s): 9.6.1). A specially crafted chaco can lead to an…
CVE-2026-8824High7.52026-10-29A memory corruption vulnerability exists in the vtkBMPReader ExecuteDataWithInformation functionality of vtk (version(s): 9.6.1). A specially crafted .bmp file…
CVE-2026-8822High7.52026-10-29A memory corruption vulnerability exists in the vtkDEMReader ReadProfiles functionality of vtk (version(s): 9.6.1). A specially crafted USGS DEM can lead to a…
CVE-2026-42057High7.52026-10-29An invalid pointer dereference vulnerability exists in the vtkPNGReader::vtkPNGReaderUpdate2 functionality of vtk 9.6. A specially crafted .png file can lead t…
CVE-2026-41216High7.52026-10-29An invalid pointer dereference vulnerability exists in the vtkPNGReader::ExecuteInformation functionality of vtk 9.6. A specially crafted .png file can lead to…
CVE-2026-22879High8.12026-06-25A heap-based buffer overflow vulnerability exists in the vtkDICOMItem::FindDataElementOrInsert functionality of vtk-dicom (version(s): 9.5.2). A specially craf…
CVE-2025-57108Critical9.82025-10-31Kitware VTK (Visualization Toolkit) through 9.5.0 contains a heap use-after-free vulnerability in vtkGLTFDocumentLoader. The vulnerability manifests during mes…
CVE-2025-57107High7.12025-10-31Kitware VTK (Visualization Toolkit) through 9.5.0 contains a heap buffer overflow vulnerability in vtkGLTFDocumentLoader. When processing specially crafted GLT…
CVE-2025-57106High7.52025-10-31Kitware VTK (Visualization Toolkit) up to 9.5.0 is vulnerable to Buffer Overflow in vtkGLTFDocumentLoader. The vulnerability occurs in the BufferDataExtraction…
CVE-2021-42521High7.52022-08-25There is a NULL pointer dereference vulnerability in VTK before 9.2.5, and it lies in IO/Infovis/vtkXMLTreeReader.cxx. The vendor didn't check the return value…