VTK: Memory corruption in vtkBMPReader (CVE-2026-8824)
A memory corruption vulnerability in VTK 9.6.1 allows for a buffer overflow when processing a specially crafted .bmp file.
CVE search metadata
CVE search record: CVE-2026-8824. Severity: high. CVSS: 7.5. KEV: no. Product: VTK (9.6.1). Brief: VTK: Memory corruption in vtkBMPReader (CVE-2026-8824). Brief link: https://feed.craftedsignal.io/briefs/2026-10-vtk-cve-2026-8824/
CVE search record: CVE-2026-8822. Severity: high. CVSS: 7.5. KEV: no. Product: VTK (9.6.1). Brief: VTK: Memory corruption in vtkBMPReader (CVE-2026-8824). Brief link: https://feed.craftedsignal.io/briefs/2026-10-vtk-cve-2026-8824/
Triage facts
Revision 2- Applicability
- VTK (9.6.1)
- Evidence
- Unknown
- Severity
- Low
- Sources
- 2 public sources
- Freshness
- Revision 2Oct 29, 21:08 UTC
- Vulnerabilities
- 2 CVEs
- Source quality
- A2Roughly even chance
Revision history 1 entry · Revision 2
- Revision 2
added CVE-2026-8822
Changed: cves, lastmod, references, updates
Sources: 1
A memory corruption vulnerability exists in the vtkBMPReader ExecuteDataWithInformation functionality of VTK (version 9.6.1). A specially crafted .bmp file can trigger a buffer overflow.