CVE-2026-42057: High severity vulnerability
An invalid pointer dereference vulnerability exists in the vtkPNGReader::vtkPNGReaderUpdate2 functionality of vtk 9.6. A specially crafted .png file can lead to a denial of service. An attacker can provide a malicious file to trigger this vulnerability.
Event History
Frequently Asked Questions
Who is exposed to this issue?
Applications using vtk 9.6 and processing PNG files through vtkPNGReader::vtkPNGReaderUpdate2 are exposed. An attacker can trigger the issue by providing a specially crafted PNG file.
Does exploitation require authentication or user interaction?
No authentication or user interaction is required according to the supplied CVSS vector. The attacker needs a way to supply a malicious PNG file to the affected application.
What is the expected impact?
Successful exploitation can cause a denial of service through an invalid pointer dereference. The provided severity vector indicates no stated confidentiality or integrity impact.