CVE-2026-8822: Buffer Overflow
A memory corruption vulnerability exists in the vtkDEMReader ReadProfiles functionality of vtk (version(s): 9.6.1). A specially crafted USGS DEM can lead to a buffer overflow. An attacker can provide a malicious file to trigger this vulnerability.
Event History
Frequently Asked Questions
Who is exposed to this vulnerability?
Systems using vtk 9.6.1 that process USGS DEM files through the vtkDEMReader ReadProfiles functionality are exposed. Exploitation requires an attacker to be able to supply a malicious DEM file for processing.
Does exploitation require authentication or user interaction?
No. The supplied severity vector indicates network-reachable exploitation with low attack complexity, no privileges required, and no user interaction required.
What is the likely impact of successful exploitation?
The reported impact is high availability impact, meaning successful exploitation can cause a denial of service. The provided vector reports no confidentiality or integrity impact.