CVE-2025-57106

Kitware VTK (Visualization Toolkit) up to 9.5.0 is vulnerable to Buffer Overflow in vtkGLTFDocumentLoader. The vulnerability occurs in the BufferDataExtractionWorker template function when processing GLTF accessor data.

• CWE-122

• https://gitlab.kitware.com/vtk/vtk/-/issues/19733Exploit, Issue Tracking, Third Party Advisory
• https://gitlab.kitware.com/vtk/vtk/-/issues/19734Exploit, Issue Tracking, Third Party Advisory

Published

Oct 31, 2025

Last Modified

Jun 17, 2026

Status

Analyzed

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2025-57086Tenda W30E V16.01.0.19 (5037) was discovered to contain a st…7.5
• CVE-2025-57087Tenda W30E V16.01.0.19 (5037) was discovered to contain a st…7.5
• CVE-2025-5709A vulnerability classified as critical was found in code-pro…7.3
• CVE-2025-5710A vulnerability, which was classified as critical, has been …7.3
• CVE-2025-57104Teampel 5.1.6 is vulnerable to SQL Injection in /Common/logi…5.4
• CVE-2025-57105The DI-7400G+ router has a command injection vulnerability, …9.8
• CVE-2025-57107Kitware VTK (Visualization Toolkit) through 9.5.0 contains a…7.1
• CVE-2025-57108Kitware VTK (Visualization Toolkit) through 9.5.0 contains a…9.8
• CVE-2025-57109Kitware VTK (Visualization Toolkit) 9.5.0 is vulnerable to H…6.5
• CVE-2025-5711A vulnerability, which was classified as critical, was found…7.3
• CVE-2025-57117A Clickjacking vulnerability exists in Rems' Employee Manage…5.4
• CVE-2025-57118An issue in PHPGurukul Online-Library-Management-System v3.0…9.8