VTK vulnerabilities

A heap-based buffer overflow exists in the vtkWindBladeReader FindVariableOffsets functionality of VTK version 9.6.1. A specially crafted .wind file can trigger a buffer overflow.

An out-of-bounds read vulnerability exists in the vtkChacoReader InputGraph2 functionality of VTK version 9.6.1. A specially crafted chaco file can trigger an out-of-bounds read.

A memory corruption vulnerability exists in the vtkBMPReader ExecuteDataWithInformation functionality of VTK version 9.6.1. A specially crafted .bmp file can lead to a buffer overflow.

A memory corruption vulnerability exists in the vtkDEMReader ReadProfiles functionality of VTK version 9.6.1. A specially crafted USGS DEM file can lead to a buffer overflow.

An invalid pointer dereference vulnerability exists in the vtkPNGReader::vtkPNGReaderUpdate2 functionality of VTK 9.6. A specially crafted .png file can lead to a denial of service.

An invalid pointer dereference vulnerability exists in the vtkPNGReader::ExecuteInformation functionality of VTK 9.6. A specially crafted .png file can lead to a denial of service.