CVE-2025-57107: Buffer Overflow
Kitware VTK (Visualization Toolkit) through 9.5.0 contains a heap buffer overflow vulnerability in vtkGLTFDocumentLoader. When processing specially crafted GLTF files, the copy constructor of Accessor objects fails to properly validate buffer boundaries before performing memory read operations.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2025-57107?
CVE-2025-57107 is classified as a high-severity vulnerability due to the potential for remote code execution and system compromise.
How do I fix CVE-2025-57107?
To fix CVE-2025-57107, upgrade to a patched version of Kitware VTK beyond 9.5.0 where the vulnerability has been addressed.
What causes CVE-2025-57107?
CVE-2025-57107 is caused by a heap buffer overflow during the processing of specially crafted GLTF files in vtkGLTFDocumentLoader.
Who is affected by CVE-2025-57107?
Any user or organization utilizing Kitware VTK versions up to and including 9.5.0 is affected by CVE-2025-57107.
Can CVE-2025-57107 lead to data loss?
Yes, CVE-2025-57107 can lead to data loss if an attacker exploits the vulnerability to manipulate memory.