An invalid pointer dereference vulnerability exists in the vtkPNGReader::ExecuteInformation functionality of vtk 9.6. A specially crafted .png file can lead to a denial of service. An attacker can provide a malicious file to trigger this vulnerability.
Metrics
Affected Vendors & Products
| Vendors | Products |
|---|---|
| Vtk |
|
No data.
No data.
References
History
Fri, 30 Oct 2026 18:30:00 +0000
| Type | Values Removed | Values Added |
|---|---|---|
| Metrics |
ssvc
|
Thu, 29 Oct 2026 20:15:00 +0000
| Type | Values Removed | Values Added |
|---|---|---|
| First Time appeared |
Vtk
Vtk vtk |
|
| Vendors & Products |
Vtk
Vtk vtk |
Thu, 29 Oct 2026 20:00:00 +0000
| Type | Values Removed | Values Added |
|---|---|---|
| Title | Denial of Service via Invalid Pointer Dereference in VTK PNG Reader |
Thu, 29 Oct 2026 18:30:00 +0000
| Type | Values Removed | Values Added |
|---|---|---|
| Description | An invalid pointer dereference vulnerability exists in the vtkPNGReader::ExecuteInformation functionality of vtk 9.6. A specially crafted .png file can lead to a denial of service. An attacker can provide a malicious file to trigger this vulnerability. | |
| Weaknesses | CWE-825 | |
| References |
| |
| Metrics |
cvssV3_1
|
MITRE
Status: PUBLISHED
Assigner: talos
Published: 2026-10-29T18:16:43.058Z
Updated: 2026-10-30T17:22:40.522Z
Reserved: 2026-04-28T14:56:56.127Z
Link: CVE-2026-41216
Vulnrichment
Updated: 2026-10-30T17:22:35.411Z
NVD
Status : Awaiting Analysis
Published: 2026-10-29T19:17:21.710
Modified: 2026-10-30T18:17:30.177
Link: CVE-2026-41216
Redhat
No data.