A heap-based buffer overflow in the vtkWindBladeReader component of VTK 9.6.1 can be triggered by a specially crafted WindBlade .wind data set. A signed byteCount value in the binary data file can produce a zero-sized buffer, and out-of-bounds reads then follow. An attacker who can supply such a file to a vulnerable application can cause a deterministic denial of service and may expose heap-resident data.
Kitware · VTK
A out-of-bounds read vulnerability in the vtkChacoReader InputGraph2 function of VTK 9.6.1 allows an attacker to read memory outside the intended buffer. The flaw is caused by missing validation of neighbor vertex IDs in Chaco graph files, which are later used as point indices. An attacker can trigger it by supplying a specially crafted Chaco file to an application that parses such input, which may lead to a crash or limited information disclosure.
Kitware · VTK
The vtkBMPReader component of the VTK (Visualization Toolkit) library, version 9.6.1 according to the CNA, contains a memory corruption flaw when parsing BMP files with an unsupported bit depth. A specially crafted BMP file can cause a heap-buffer-overflow write, which can crash the application that opens the file. The attack requires that an application using VTK opens a malicious file, which is why exposure mainly concerns upload features or image-processing pipelines.
Kitware · VTK
A memory corruption flaw (out-of-bounds write) in the vtkDEMReader ReadProfiles function of VTK 9.6.1 causes a heap buffer overflow when a specially crafted USGS DEM file is parsed. An attacker who can supply such a file to an application that uses VTK can trigger the flaw, which the advisory describes as an availability impact (crash or denial of service). No authentication is required, but the malicious file must reach the parser. Code execution has not been confirmed.
Kitware · VTK
The PNG reader (vtkPNGReader::vtkPNGReaderUpdate2) of the Visualization Toolkit (VTK) 9.6 contains an invalid pointer dereference. A specially crafted PNG file can crash the process, causing a denial of service. An attacker only needs to supply the malicious file to the application, without authentication or user interaction, if the application accepts untrusted PNG files.
Kitware · VTK
VTK 9.6 contains an invalid pointer dereference in vtkPNGReader::ExecuteInformation. A specially crafted PNG file can crash the process, causing a denial of service. The flaw is in error handling after a libpng longjmp, which can leave a dangling file pointer that is later passed to fclose(). The CVSS score of 7.5 reflects availability impact only, as the CNA rates it, but the NVD entry was still awaiting analysis at the time of writing.
Kitware · VTK
