CVE-2025-57109: Use After Free
Kitware VTK (Visualization Toolkit) 9.5.0 is vulnerable to Heap Use-After-Free in vtkGLTFImporter::ImportActors. When processing GLTF files with invalid scene node references, the application accesses string members of mesh objects that have been previously freed during actor import operations.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2025-57109?
CVE-2025-57109 is classified as a high severity vulnerability due to the potential for exploitation through Heap Use-After-Free.
How do I fix CVE-2025-57109?
To fix CVE-2025-57109, you should update to the latest version of Kitware VTK that contains the security patch.
What causes CVE-2025-57109?
CVE-2025-57109 is caused by accessing freed memory when processing GLTF files with invalid scene node references.
What is affected by CVE-2025-57109?
CVE-2025-57109 affects Kitware VTK version 9.5.0 when importing GLTF files.
What are the potential impacts of CVE-2025-57109?
The potential impacts of CVE-2025-57109 include application crashes and arbitrary code execution if exploited.