CVE-2025-57109

Medium severity, CVSS 6.5. EPSS: 0.3% chance of exploitation in the next 30 days.

Kitware VTK (Visualization Toolkit) 9.5.0 is vulnerable to Heap Use-After-Free in vtkGLTFImporter::ImportActors. When processing GLTF files with invalid scene node references, the application accesses string members of mesh objects that have been previously freed during actor import operations.

Published 2025-10-30. Last modified 2026-06-17.