CVE-2025-57108_CVE-2025-57108

9.8 / 10

CRITICAL

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Description

Kitware VTK (Visualization Toolkit) through 9.5.0 contains a heap use-after-free vulnerability in vtkGLTFDocumentLoader. The vulnerability manifests during mesh object copy operations where vector members are accessed after the underlying memory has been freed, specifically when handling GLTF files with corrupted or invalid mesh reference structures.

AI Analysis

Heap use-after-free vulnerability in vtkGLTFDocumentLoader during mesh object copy operations

Basic Information

ID CVE-2025-57108

Source mitre

Published Oct 31, 2025 at 00:00

Modified Oct 31, 2025 at 19:07

Affected Product

Vendor n/a

Product n/a

Version n/a

Affected Versions n/a n/a n/a

CWE Classification

CWE-416

AI Assessment

AI Score 9.8 / 10

AI Severity Critical

Vendor Kitware

Product VTK (Visualization Toolkit)

Version through 9.5.0

References

gitlab.kitware.com /vtk/vtk/-/issues/19736

{
    "lastseen": "",
    "description": "Kitware VTK (Visualization Toolkit) through 9.5.0 contains a heap use-after-free vulnerability in vtkGLTFDocumentLoader. The vulnerability manifests during mesh object copy operations where vector members are accessed after the underlying memory has been freed, specifically when handling GLTF files with corrupted or invalid mesh reference structures.",
    "published": "2025-10-31T00:00:00.000Z",
    "modified": "2025-10-31T19:07:13.950Z",
    "type": "cve",
    "title": "CVE-2025-57108",
    "source": "mitre",
    "references": "https://gitlab.kitware.com/vtk/vtk/-/issues/19736",
    "id": "CVE-2025-57108",
    "bulletinFamily": "",
    "cwe": [
        "CWE-416"
    ],
    "cvelist": null,
    "sourceData": "n/a n/a n/a",
    "sourceHref": "",
    "cvss": {
        "score": 9.8,
        "severity": "CRITICAL",
        "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
        "version": "3.1"
    },
    "cvss2": [],
    "cvss3": {
        "version": "",
        "vectorString": "",
        "baseScore": 0,
        "baseSeverity": "",
        "attackVector": "",
        "attackComplexity": "",
        "privilegesRequired": "",
        "userInteraction": "",
        "scope": "",
        "confidentialityImpact": "",
        "integrityImpact": "",
        "availabilityImpact": "",
        "cvssV3": {
            "version": "",
            "vectorString": "",
            "baseScore": 0,
            "baseSeverity": "",
            "attackVector": "",
            "attackComplexity": "",
            "privilegesRequired": "",
            "userInteraction": "",
            "scope": "",
            "confidentialityImpact": "",
            "integrityImpact": "",
            "availabilityImpact": ""
        }
    },
    "href": "",
    "category_name": "CVE",
    "post_link": "",
    "product": "n/a",
    "version": "n/a",
    "vendor": "n/a",
    "ai_description": "Heap use-after-free vulnerability in vtkGLTFDocumentLoader during mesh object copy operations",
    "ai_severity": "Critical",
    "ai_vendor": "Kitware",
    "ai_product": "VTK (Visualization Toolkit)",
    "ai_version": "through 9.5.0",
    "ai_score": 9.8
}