Debian/vtk9: medium 6.5
Kitware VTK (Visualization Toolkit) 9.5.0 is vulnerable to Heap Use-After-Free in vtkGLTFImporter::ImportActors. When processing GLTF files with invalid scene node references, the application accesses
Action: Upgrade vtk9 to 9.6.2+ds-1 or later.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 9.6.2+ds-1 | - |
Fixed versions
| 9.6.2+ds-1 |
Sources
- osv: DEBIAN-CVE-2025-57109#Debian:14/vtk9
- https://security-tracker.debian.org/tracker/CVE-2025-57109
published · modified · JSON