High severity7.5NVD Advisory· Published Oct 29, 2026

CVE-2026-9536

Description

A heap-based buffer overflow vulnerability exists in the vtkWindBladeReader FindVariableOffsets functionality of vtk (version(s): 9.6.1). A specially crafted .wind can lead to a buffer overflow. An attacker can provide a malicious file to trigger this vulnerability.

Patches

Vulnerability mechanics

References

talosintelligence.com/vulnerability_reports/TALOS-2026-2424nvd
vtk.org/download/nvd

News mentions

No linked articles in our index yet.