DEBIAN-CVE-2026-42057: High severity debian/vtk9 vulnerability

Published Oct 29, 2026

Updated

An invalid pointer dereference vulnerability exists in the vtkPNGReader::vtkPNGReaderUpdate2 functionality of vtk 9.6. A specially crafted .png file can lead to a denial of service. An attacker can provide a malicious file to trigger this vulnerability.

Affected Software

3 affected components

debian/vtk9*

Event History

Oct 29, 2026

CVE Published

via OSV·07:17 PM

Data Sourced

via OSV·07:17 PM

DescriptionSeverityAffected Software

Frequently Asked Questions

What does an attacker need to do to trigger the denial of service?

The attacker needs to provide a specially crafted PNG file that is processed by vtkPNGReader::vtkPNGReaderUpdate2. No authentication or user interaction is indicated by the supplied severity vector.

What is the expected impact if exploitation succeeds?

Successful exploitation can cause a denial of service through an invalid pointer dereference. The supplied severity vector indicates no confidentiality or integrity impact.

DEBIAN-CVE-2026-42057: High severity debian/vtk9 vulnerability

Affected Software

Event History

Frequently Asked Questions

What does an attacker need to do to trigger the denial of service?

What is the expected impact if exploitation succeeds?

Company

Resources

Contact

Frequently Asked Questions

What does an attacker need to do to trigger the denial of service?

What is the expected impact if exploitation succeeds?