CVE-2026-8824

{"dataType": "CVE_RECORD", "dataVersion": "5.2", "cveMetadata": {"cveId": "CVE-2026-8824", "assignerOrgId": "b86d76f8-0f8a-4a96-a78d-d8abfc7fc29b", "state": "PUBLISHED", "assignerShortName": "talos", "dateReserved": "2026-05-18T10:06:58.194Z", "datePublished": "2026-10-29T18:16:41.816Z", "dateUpdated": "2026-10-30T17:21:13.595Z"}, "containers": {"cna": {"affected": [{"vendor": "vtk", "product": "vtk", "versions": [{"status": "affected", "version": "9.6.1"}], "defaultStatus": "unaffected"}], "descriptions": [{"lang": "en", "value": "A memory corruption vulnerability exists in the vtkBMPReader ExecuteDataWithInformation functionality of vtk (version(s): 9.6.1). A specially crafted .bmp file can lead to a buffer overflow. An attacker can provide a malicious file to trigger this vulnerability."}], "problemTypes": [{"descriptions": [{"lang": "en", "description": "CWE-787: Out-of-bounds Write", "type": "CWE", "cweId": "CWE-787"}]}], "metrics": [{"cvssV3_1": {"version": "3.1", "attackVector": "NETWORK", "attackComplexity": "LOW", "privilegesRequired": "NONE", "userInteraction": "NONE", "scope": "UNCHANGED", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "availabilityImpact": "HIGH", "baseSeverity": "HIGH", "baseScore": 7.5, "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H"}}], "providerMetadata": {"orgId": "b86d76f8-0f8a-4a96-a78d-d8abfc7fc29b", "shortName": "talos", "dateUpdated": "2026-10-29T18:16:41.816Z"}, "references": [{"url": "https://talosintelligence.com/vulnerability_reports/TALOS-2026-2422", "name": "https://talosintelligence.com/vulnerability_reports/TALOS-2026-2422"}, {"url": "https://vtk.org/download/", "name": "https://vtk.org/download/"}], "credits": [{"lang": "en", "value": "Discovered by Emmanuel Tacheau of Cisco Talos"}]}, "adp": [{"metrics": [{"other": {"type": "ssvc", "content": {"timestamp": "2026-10-30T17:20:59.605485Z", "id": "CVE-2026-8824", "options": [{"Exploitation": "none"}, {"Automatable": "yes"}, {"Technical Impact": "partial"}], "role": "CISA Coordinator", "version": "2.0.3"}}}], "title": "CISA ADP Vulnrichment", "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2026-10-30T17:21:13.595Z"}}]}}

{"dataType": "CVE_RECORD", "containers": {"adp": [{"title": "CISA ADP Vulnrichment", "metrics": [{"other": {"type": "ssvc", "content": {"id": "CVE-2026-8824", "role": "CISA Coordinator", "options": [{"Exploitation": "none"}, {"Automatable": "yes"}, {"Technical Impact": "partial"}], "version": "2.0.3", "timestamp": "2026-10-30T17:20:59.605485Z"}}}], "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2026-10-30T17:21:07.857Z"}}], "cna": {"credits": [{"lang": "en", "value": "Discovered by Emmanuel Tacheau of Cisco Talos"}], "metrics": [{"cvssV3_1": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 7.5, "attackVector": "NETWORK", "baseSeverity": "HIGH", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "integrityImpact": "NONE", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "HIGH", "privilegesRequired": "NONE", "confidentialityImpact": "NONE"}}], "affected": [{"vendor": "vtk", "product": "vtk", "versions": [{"status": "affected", "version": "9.6.1"}], "defaultStatus": "unaffected"}], "references": [{"url": "https://talosintelligence.com/vulnerability_reports/TALOS-2026-2422", "name": "https://talosintelligence.com/vulnerability_reports/TALOS-2026-2422"}, {"url": "https://vtk.org/download/", "name": "https://vtk.org/download/"}], "descriptions": [{"lang": "en", "value": "A memory corruption vulnerability exists in the vtkBMPReader ExecuteDataWithInformation functionality of vtk (version(s): 9.6.1). A specially crafted .bmp file can lead to a buffer overflow. An attacker can provide a malicious file to trigger this vulnerability."}], "problemTypes": [{"descriptions": [{"lang": "en", "type": "CWE", "cweId": "CWE-787", "description": "CWE-787: Out-of-bounds Write"}]}], "providerMetadata": {"orgId": "b86d76f8-0f8a-4a96-a78d-d8abfc7fc29b", "shortName": "talos", "dateUpdated": "2026-10-29T18:16:41.816Z"}}}, "cveMetadata": {"cveId": "CVE-2026-8824", "state": "PUBLISHED", "dateUpdated": "2026-10-30T17:21:13.595Z", "dateReserved": "2026-05-18T10:06:58.194Z", "assignerOrgId": "b86d76f8-0f8a-4a96-a78d-d8abfc7fc29b", "datePublished": "2026-10-29T18:16:41.816Z", "assignerShortName": "talos"}, "dataVersion": "5.2"}

{"affected": [{"affectedData": [{"defaultStatus": "unaffected", "product": "vtk", "vendor": "vtk", "versions": [{"status": "affected", "version": "9.6.1"}]}], "source": "talos-cna@cisco.com"}], "cveTags": [], "descriptions": [{"lang": "en", "value": "A memory corruption vulnerability exists in the vtkBMPReader ExecuteDataWithInformation functionality of vtk (version(s): 9.6.1). A specially crafted .bmp file can lead to a buffer overflow. An attacker can provide a malicious file to trigger this vulnerability."}], "id": "CVE-2026-8824", "lastModified": "2026-10-30T18:18:16.467", "metrics": {"cvssMetricV31": [{"cvssData": {"attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 7.5, "baseSeverity": "HIGH", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "version": "3.1"}, "exploitabilityScore": 3.9, "impactScore": 3.6, "source": "talos-cna@cisco.com", "type": "Secondary"}], "ssvcV203": [{"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "ssvcData": {"id": "CVE-2026-8824", "options": [{"exploitation": "none"}, {"automatable": "yes"}, {"technicalImpact": "partial"}], "role": "CISA Coordinator", "timestamp": "2026-10-30T17:20:59.605485Z", "version": "2.0.3"}}]}, "published": "2026-10-29T19:17:28.330", "references": [{"source": "talos-cna@cisco.com", "url": "https://talosintelligence.com/vulnerability_reports/TALOS-2026-2422"}, {"source": "talos-cna@cisco.com", "url": "https://vtk.org/download/"}], "sourceIdentifier": "talos-cna@cisco.com", "vulnStatus": "Awaiting Analysis", "weaknesses": [{"description": [{"lang": "en", "value": "CWE-787"}], "source": "talos-cna@cisco.com", "type": "Secondary"}]}

{"bugzilla": {"description": "vtk: vtk: Denial of Service via buffer overflow in vtkBMPReader", "id": "2563624", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2563624"}, "csaw": false, "cvss3": {"cvss3_base_score": "5.5", "cvss3_scoring_vector": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H", "status": "draft"}, "cwe": "CWE-787", "details": ["A memory corruption vulnerability exists in the vtkBMPReader ExecuteDataWithInformation functionality of vtk (version(s): 9.6.1). A specially crafted .bmp file can lead to a buffer overflow. An attacker can provide a malicious file to trigger this vulnerability.", "A flaw was found in vtk. The image reader component, vtkBMPReader, improperly handles input boundaries, leading to a buffer overflow when processing bitmap (BMP) files. A remote attacker could exploit this vulnerability by providing a specially crafted BMP file, causing the application to crash and resulting in a Denial of Service (DoS)."], "name": "CVE-2026-8824", "public_date": "2026-10-29T18:16:41Z", "references": ["https://www.cve.org/CVERecord?id=CVE-2026-8824\nhttps://nvd.nist.gov/vuln/detail/CVE-2026-8824\nhttps://talosintelligence.com/vulnerability_reports/TALOS-2026-2422\nhttps://vtk.org/download/"], "statement": "This vulnerability is rated as having Moderate impact because exploitation requires user interaction to process an untrusted bitmap image, and the resulting blast radius is constrained to application crash and denial of service without compromising data integrity or confidentiality. The Visualization Toolkit (VTK) is not packaged in default Red Hat Enterprise Linux installations and is only available through community repositories such as EPEL. Consequently, core enterprise deployments remain unaffected unless custom software or third-party packages explicitly consume this graphics library to parse untrusted image assets.", "threat_severity": "Moderate"}

{"affected": [{"configurations": [{"platform": null, "status": "affected", "versions": {"scheme": "semver", "value": "9.6.1"}}], "enrichment": {"confidence": 100.0, "confidence_source": "matching", "scores": [{"score": 100.0, "source": "matching"}]}, "original": {"product": "vtk", "source": "cna", "vendor": "vtk"}, "product": "vtk", "vendor": "vtk"}], "created": "2026-10-29T20:00:26.678000+00:00", "title": "Buffer Overflow in VTK BMP Reader via Malicious BMP File", "updated": "2026-10-29T20:00:29.067226+00:00", "vendors": ["vtk", "vtk$PRODUCT$vtk"]}