tocsin

CVE-2025-57107

1 advisory.

PyPI/vtk CVE-2025-57107: high 7.1

Kitware VTK (Visualization Toolkit) through 9.5.0 contains a heap buffer overflow vulnerability in vtkGLTFDocumentLoader. When processing specially crafted GLTF files, the copy constructor of Accessor

Action: Upgrade vtk to 9.5.1 or later.

pip install vtk==9.5.1

Affected

introducedfixedlast affected
09.5.1-

Fixed versions

9.5.1

Sources

CVE-2025-57107 · published · modified · JSON