CVE-2026-9536

{"dataType": "CVE_RECORD", "dataVersion": "5.2", "cveMetadata": {"cveId": "CVE-2026-9536", "assignerOrgId": "b86d76f8-0f8a-4a96-a78d-d8abfc7fc29b", "state": "PUBLISHED", "assignerShortName": "talos", "dateReserved": "2026-05-25T20:27:58.617Z", "datePublished": "2026-10-29T18:16:40.913Z", "dateUpdated": "2026-10-30T17:20:19.693Z"}, "containers": {"cna": {"affected": [{"vendor": "vtk", "product": "vtk", "versions": [{"status": "affected", "version": "9.6.1"}], "defaultStatus": "unaffected"}], "descriptions": [{"lang": "en", "value": "A heap-based buffer overflow vulnerability exists in the vtkWindBladeReader FindVariableOffsets functionality of vtk (version(s): 9.6.1). A specially crafted .wind can lead to a buffer overflow. An attacker can provide a malicious file to trigger this vulnerability."}], "problemTypes": [{"descriptions": [{"lang": "en", "description": "CWE-122: Heap-based Buffer Overflow", "type": "CWE", "cweId": "CWE-122"}]}], "metrics": [{"cvssV3_1": {"version": "3.1", "attackVector": "NETWORK", "attackComplexity": "LOW", "privilegesRequired": "NONE", "userInteraction": "NONE", "scope": "UNCHANGED", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "availabilityImpact": "HIGH", "baseSeverity": "HIGH", "baseScore": 7.5, "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H"}}], "providerMetadata": {"orgId": "b86d76f8-0f8a-4a96-a78d-d8abfc7fc29b", "shortName": "talos", "dateUpdated": "2026-10-29T18:16:40.913Z"}, "references": [{"url": "https://talosintelligence.com/vulnerability_reports/TALOS-2026-2424", "name": "https://talosintelligence.com/vulnerability_reports/TALOS-2026-2424"}, {"url": "https://vtk.org/download/", "name": "https://vtk.org/download/"}], "credits": [{"lang": "en", "value": "Discovered by Emmanuel Tacheau of Cisco Talos"}]}, "adp": [{"metrics": [{"other": {"type": "ssvc", "content": {"timestamp": "2026-10-30T17:20:09.854200Z", "id": "CVE-2026-9536", "options": [{"Exploitation": "none"}, {"Automatable": "yes"}, {"Technical Impact": "partial"}], "role": "CISA Coordinator", "version": "2.0.3"}}}], "title": "CISA ADP Vulnrichment", "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2026-10-30T17:20:19.693Z"}}]}}

{"dataType": "CVE_RECORD", "containers": {"adp": [{"title": "CISA ADP Vulnrichment", "metrics": [{"other": {"type": "ssvc", "content": {"id": "CVE-2026-9536", "role": "CISA Coordinator", "options": [{"Exploitation": "none"}, {"Automatable": "yes"}, {"Technical Impact": "partial"}], "version": "2.0.3", "timestamp": "2026-10-30T17:20:09.854200Z"}}}], "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2026-10-30T17:20:15.371Z"}}], "cna": {"credits": [{"lang": "en", "value": "Discovered by Emmanuel Tacheau of Cisco Talos"}], "metrics": [{"cvssV3_1": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 7.5, "attackVector": "NETWORK", "baseSeverity": "HIGH", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "integrityImpact": "NONE", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "HIGH", "privilegesRequired": "NONE", "confidentialityImpact": "NONE"}}], "affected": [{"vendor": "vtk", "product": "vtk", "versions": [{"status": "affected", "version": "9.6.1"}], "defaultStatus": "unaffected"}], "references": [{"url": "https://talosintelligence.com/vulnerability_reports/TALOS-2026-2424", "name": "https://talosintelligence.com/vulnerability_reports/TALOS-2026-2424"}, {"url": "https://vtk.org/download/", "name": "https://vtk.org/download/"}], "descriptions": [{"lang": "en", "value": "A heap-based buffer overflow vulnerability exists in the vtkWindBladeReader FindVariableOffsets functionality of vtk (version(s): 9.6.1). A specially crafted .wind can lead to a buffer overflow. An attacker can provide a malicious file to trigger this vulnerability."}], "problemTypes": [{"descriptions": [{"lang": "en", "type": "CWE", "cweId": "CWE-122", "description": "CWE-122: Heap-based Buffer Overflow"}]}], "providerMetadata": {"orgId": "b86d76f8-0f8a-4a96-a78d-d8abfc7fc29b", "shortName": "talos", "dateUpdated": "2026-10-29T18:16:40.913Z"}}}, "cveMetadata": {"cveId": "CVE-2026-9536", "state": "PUBLISHED", "dateUpdated": "2026-10-30T17:20:19.693Z", "dateReserved": "2026-05-25T20:27:58.617Z", "assignerOrgId": "b86d76f8-0f8a-4a96-a78d-d8abfc7fc29b", "datePublished": "2026-10-29T18:16:40.913Z", "assignerShortName": "talos"}, "dataVersion": "5.2"}

{"affected": [{"affectedData": [{"defaultStatus": "unaffected", "product": "vtk", "vendor": "vtk", "versions": [{"status": "affected", "version": "9.6.1"}]}], "source": "talos-cna@cisco.com"}], "cveTags": [], "descriptions": [{"lang": "en", "value": "A heap-based buffer overflow vulnerability exists in the vtkWindBladeReader FindVariableOffsets functionality of vtk (version(s): 9.6.1). A specially crafted .wind can lead to a buffer overflow. An attacker can provide a malicious file to trigger this vulnerability."}], "id": "CVE-2026-9536", "lastModified": "2026-10-30T18:18:21.873", "metrics": {"cvssMetricV31": [{"cvssData": {"attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 7.5, "baseSeverity": "HIGH", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "version": "3.1"}, "exploitabilityScore": 3.9, "impactScore": 3.6, "source": "talos-cna@cisco.com", "type": "Secondary"}], "ssvcV203": [{"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "ssvcData": {"id": "CVE-2026-9536", "options": [{"exploitation": "none"}, {"automatable": "yes"}, {"technicalImpact": "partial"}], "role": "CISA Coordinator", "timestamp": "2026-10-30T17:20:09.854200Z", "version": "2.0.3"}}]}, "published": "2026-10-29T19:17:30.047", "references": [{"source": "talos-cna@cisco.com", "url": "https://talosintelligence.com/vulnerability_reports/TALOS-2026-2424"}, {"source": "talos-cna@cisco.com", "url": "https://vtk.org/download/"}], "sourceIdentifier": "talos-cna@cisco.com", "vulnStatus": "Awaiting Analysis", "weaknesses": [{"description": [{"lang": "en", "value": "CWE-122"}], "source": "talos-cna@cisco.com", "type": "Secondary"}]}

{"bugzilla": {"description": "vtk: vtk: Denial of Service via heap-based buffer overflow in vtkWindBladeReader", "id": "2563627", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2563627"}, "csaw": false, "cvss3": {"cvss3_base_score": "5.5", "cvss3_scoring_vector": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H", "status": "draft"}, "cwe": "CWE-787", "details": ["A heap-based buffer overflow vulnerability exists in the vtkWindBladeReader FindVariableOffsets functionality of vtk (version(s): 9.6.1). A specially crafted .wind can lead to a buffer overflow. An attacker can provide a malicious file to trigger this vulnerability.", "A flaw was found in vtk. A heap-based buffer overflow in the vtkWindBladeReader component allows an attacker to cause an application crash and a Denial of Service (DoS) by supplying a specially crafted .wind file."], "name": "CVE-2026-9536", "public_date": "2026-10-29T18:16:40Z", "references": ["https://www.cve.org/CVERecord?id=CVE-2026-9536\nhttps://nvd.nist.gov/vuln/detail/CVE-2026-9536\nhttps://talosintelligence.com/vulnerability_reports/TALOS-2026-2424\nhttps://vtk.org/download/"], "statement": "Red Hat rates this vulnerability as having a Moderate severity because exploitation requires user interaction to parse an untrusted .wind dataset, restricting the blast radius to a denial of service via application crash without impacting confidentiality or system integrity. The Visualization Toolkit is not shipped in default Red Hat Enterprise Linux installations, appearing only through supplementary or community packages such as EPEL. Systems remain unaffected unless users explicitly deploy VTK or consumer applications like ParaView and ingest untrusted simulation files.", "threat_severity": "Moderate"}

{"affected": [{"configurations": [{"platform": null, "status": "affected", "versions": {"scheme": "semver", "value": "9.6.1"}}], "enrichment": {"confidence": 100.0, "confidence_source": "matching", "scores": [{"score": 100.0, "source": "matching"}]}, "original": {"product": "vtk", "source": "cna", "vendor": "vtk"}, "product": "vtk", "vendor": "vtk"}], "created": "2026-10-29T20:00:26.678634+00:00", "updated": "2026-11-04T14:30:15.633052+00:00", "vendors": ["vtk", "vtk$PRODUCT$vtk"]}