https://patchthecve.com/CVEs with upgrade or downgrade fix stepshttps://patchthecve.com/cve/CVE-2025-57108.htmlhttps://patchthecve.com/cve/CVE-2025-57108.htmlWed, 17 Jun 2026 09:42:52 +0000CRITICAL 9.8: Kitware VTK (Visualization Toolkit) through 9.5.0 contains a heap use-after-free vulnerability in vtkGLTFDocumentLoader. The vulnerability manifests during mesh object copy operations where vector members are accessed after the underlying memory has been freed, specifically when handling GLTF files https://patchthecve.com/cve/CVE-2025-57107.htmlhttps://patchthecve.com/cve/CVE-2025-57107.htmlWed, 17 Jun 2026 09:42:51 +0000HIGH 7.1: Kitware VTK (Visualization Toolkit) through 9.5.0 contains a heap buffer overflow vulnerability in vtkGLTFDocumentLoader. When processing specially crafted GLTF files, the copy constructor of Accessor objects fails to properly validate buffer boundaries before performing memory read operations.https://patchthecve.com/cve/CVE-2025-57106.htmlhttps://patchthecve.com/cve/CVE-2025-57106.htmlWed, 17 Jun 2026 09:42:51 +0000HIGH 7.5: Kitware VTK (Visualization Toolkit) up to 9.5.0 is vulnerable to Buffer Overflow in vtkGLTFDocumentLoader. The vulnerability occurs in the BufferDataExtractionWorker template function when processing GLTF accessor data.