Cloud Vulnerability DB
A community-led vulnerabilities database
Vulnerability DatabaseCVE-2025-57106
CVE-2025-57106:
NixOS vulnerability analysis and mitigation
Overview
Kitware VTK (Visualization Toolkit) versions up to 9.5.0 contain a Buffer Overflow vulnerability in the vtkGLTFDocumentLoader component. The vulnerability was disclosed on October 31, 2025, and specifically occurs in the BufferDataExtractionWorker template function when processing GLTF accessor data (NVD).
Technical details
The vulnerability has been classified as a Heap-based Buffer Overflow (CWE-122). According to the CVSS 3.1 scoring system, it has received a High severity score of 7.5 with the following vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H (NVD).
Impact
The vulnerability affects the availability of the system, as indicated by the CVSS vector showing impact only on availability (A:H) with no impact on confidentiality or integrity. This suggests that successful exploitation could lead to system crashes or service disruptions (NVD).
Mitigation and workarounds
The vulnerability affects VTK versions up to 9.5.0, suggesting that users should upgrade to newer versions once available. No specific workarounds have been publicly documented at this time (NVD).
Additional resources
Source: This report was generated using AI
Related NixOS vulnerabilities:
Free Vulnerability Assessment
Benchmark your Cloud Security Posture
Evaluate your cloud security practices across 9 security domains to benchmark your risk level and identify gaps in your defenses.
Additional Wiz resources
Get a personalized demo
Ready to see Wiz in action?
"Best User Experience I have ever seen, provides full visibility to cloud workloads."
David EstlickCISO
"Wiz provides a single pane of glass to see what is going on in our cloud environments."
Adam FletcherChief Security Officer
"We know that if Wiz identifies something as critical, it actually is."
Greg PoniatowskiHead of Threat and Vulnerability Management