CVE-2026-9536: Buffer Overflow
A heap-based buffer overflow vulnerability exists in the vtkWindBladeReader FindVariableOffsets functionality of vtk (version(s): 9.6.1). A specially crafted .wind can lead to a buffer overflow. An attacker can provide a malicious file to trigger this vulnerability.
Event History
Frequently Asked Questions
Who is exposed to this vulnerability?
Systems using vtk 9.6.1 that process .wind files with the vtkWindBladeReader functionality are exposed. An attacker can trigger the issue by providing a malicious .wind file.
Does exploitation require authentication or user interaction?
No authentication or user interaction is required according to the supplied vector. Exploitation requires the vulnerable component to process the attacker-supplied .wind file.
What is the likely impact of successful exploitation?
The provided severity vector indicates a high availability impact, with no stated confidentiality or integrity impact. The vulnerability is a heap-based buffer overflow.