VYPR
← All advisories
Critical severity9.8NVD Advisory· Published Oct 31, 2025· Updated Jun 17, 2026

CVE-2025-57108

CVE-2025-57108

Description

Kitware VTK (Visualization Toolkit) through 9.5.0 contains a heap use-after-free vulnerability in vtkGLTFDocumentLoader. The vulnerability manifests during mesh object copy operations where vector members are accessed after the underlying memory has been freed, specifically when handling GLTF files with corrupted or invalid mesh reference structures.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

3
  • Vtk/Vtk
    cpe:2.3:a:vtk:vtk:*:*:*:*:*:*:*:*
    Range: <=9.5.0
  • Kitware/VTK (Visualization Toolkit)description
  • Kitware/VTKllm-fuzzy
    Range: <=9.5.0

Patches

Vulnerability mechanics

References

1

News mentions

0

No linked articles in our index yet.