{"dataType": "CVE_RECORD", "dataVersion": "5.2", "cveMetadata": {"cveId": "CVE-2026-9535", "assignerOrgId": "b86d76f8-0f8a-4a96-a78d-d8abfc7fc29b", "state": "PUBLISHED", "assignerShortName": "talos", "dateReserved": "2026-05-25T20:23:00.402Z", "datePublished": "2026-10-29T18:16:41.439Z", "dateUpdated": "2026-10-30T17:20:44.742Z"}, "containers": {"cna": {"affected": [{"vendor": "vtk", "product": "vtk", "versions": [{"status": "affected", "version": "9.6.1"}], "defaultStatus": "unaffected"}], "descriptions": [{"lang": "en", "value": "A out-of-bounds read vulnerability exists in the vtkChacoReader InputGraph2 functionality of vtk (version(s): 9.6.1). A specially crafted chaco can lead to an out-of-bounds read. An attacker can provide a malicious file to trigger this vulnerability."}], "problemTypes": [{"descriptions": [{"lang": "en", "description": "CWE-125: Out-of-bounds Read", "type": "CWE", "cweId": "CWE-125"}]}], "metrics": [{"cvssV3_1": {"version": "3.1", "attackVector": "NETWORK", "attackComplexity": "LOW", "privilegesRequired": "NONE", "userInteraction": "NONE", "scope": "UNCHANGED", "confidentialityImpact": "LOW", "integrityImpact": "NONE", "availabilityImpact": "HIGH", "baseSeverity": "HIGH", "baseScore": 8.2, "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H"}}], "providerMetadata": {"orgId": "b86d76f8-0f8a-4a96-a78d-d8abfc7fc29b", "shortName": "talos", "dateUpdated": "2026-10-29T18:16:41.439Z"}, "references": [{"url": "https://talosintelligence.com/vulnerability_reports/TALOS-2026-2423", "name": "https://talosintelligence.com/vulnerability_reports/TALOS-2026-2423"}, {"url": "https://vtk.org/download/", "name": "https://vtk.org/download/"}], "credits": [{"lang": "en", "value": "Discovered by Emmanuel Tacheau of Cisco Talos"}]}, "adp": [{"metrics": [{"other": {"type": "ssvc", "content": {"timestamp": "2026-10-30T17:20:34.812139Z", "id": "CVE-2026-9535", "options": [{"Exploitation": "none"}, {"Automatable": "yes"}, {"Technical Impact": "partial"}], "role": "CISA Coordinator", "version": "2.0.3"}}}], "title": "CISA ADP Vulnrichment", "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2026-10-30T17:20:44.742Z"}}]}}

{"dataType": "CVE_RECORD", "containers": {"cna": {"credits": [{"lang": "en", "value": "Discovered by Emmanuel Tacheau of Cisco Talos"}], "metrics": [{"cvssV3_1": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 8.2, "attackVector": "NETWORK", "baseSeverity": "HIGH", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H", "integrityImpact": "NONE", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "HIGH", "privilegesRequired": "NONE", "confidentialityImpact": "LOW"}}], "affected": [{"vendor": "vtk", "product": "vtk", "versions": [{"status": "affected", "version": "9.6.1"}], "defaultStatus": "unaffected"}], "references": [{"url": "https://talosintelligence.com/vulnerability_reports/TALOS-2026-2423", "name": "https://talosintelligence.com/vulnerability_reports/TALOS-2026-2423"}, {"url": "https://vtk.org/download/", "name": "https://vtk.org/download/"}], "descriptions": [{"lang": "en", "value": "A out-of-bounds read vulnerability exists in the vtkChacoReader InputGraph2 functionality of vtk (version(s): 9.6.1). A specially crafted chaco can lead to an out-of-bounds read. An attacker can provide a malicious file to trigger this vulnerability."}], "problemTypes": [{"descriptions": [{"lang": "en", "type": "CWE", "cweId": "CWE-125", "description": "CWE-125: Out-of-bounds Read"}]}], "providerMetadata": {"orgId": "b86d76f8-0f8a-4a96-a78d-d8abfc7fc29b", "shortName": "talos", "dateUpdated": "2026-10-29T18:16:41.439Z"}}, "adp": [{"title": "CISA ADP Vulnrichment", "metrics": [{"other": {"type": "ssvc", "content": {"id": "CVE-2026-9535", "role": "CISA Coordinator", "options": [{"Exploitation": "none"}, {"Automatable": "yes"}, {"Technical Impact": "partial"}], "version": "2.0.3", "timestamp": "2026-10-30T17:20:34.812139Z"}}}], "providerMetadata": {"shortName": "CISA-ADP", "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "dateUpdated": "2026-10-30T17:20:40.280Z"}}]}, "cveMetadata": {"cveId": "CVE-2026-9535", "state": "PUBLISHED", "dateUpdated": "2026-10-29T18:16:41.439Z", "dateReserved": "2026-05-25T20:23:00.402Z", "assignerOrgId": "b86d76f8-0f8a-4a96-a78d-d8abfc7fc29b", "datePublished": "2026-10-29T18:16:41.439Z", "assignerShortName": "talos"}, "dataVersion": "5.2"}

{"affected": [{"affectedData": [{"defaultStatus": "unaffected", "product": "vtk", "vendor": "vtk", "versions": [{"status": "affected", "version": "9.6.1"}]}], "source": "talos-cna@cisco.com"}], "cveTags": [], "descriptions": [{"lang": "en", "value": "A out-of-bounds read vulnerability exists in the vtkChacoReader InputGraph2 functionality of vtk (version(s): 9.6.1). A specially crafted chaco can lead to an out-of-bounds read. An attacker can provide a malicious file to trigger this vulnerability."}], "id": "CVE-2026-9535", "lastModified": "2026-10-30T18:18:21.757", "metrics": {"cvssMetricV31": [{"cvssData": {"attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 8.2, "baseSeverity": "HIGH", "confidentialityImpact": "LOW", "integrityImpact": "NONE", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H", "version": "3.1"}, "exploitabilityScore": 3.9, "impactScore": 4.2, "source": "talos-cna@cisco.com", "type": "Secondary"}], "ssvcV203": [{"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "ssvcData": {"id": "CVE-2026-9535", "options": [{"exploitation": "none"}, {"automatable": "yes"}, {"technicalImpact": "partial"}], "role": "CISA Coordinator", "timestamp": "2026-10-30T17:20:34.812139Z", "version": "2.0.3"}}]}, "published": "2026-10-29T19:17:29.923", "references": [{"source": "talos-cna@cisco.com", "url": "https://talosintelligence.com/vulnerability_reports/TALOS-2026-2423"}, {"source": "talos-cna@cisco.com", "url": "https://vtk.org/download/"}], "sourceIdentifier": "talos-cna@cisco.com", "vulnStatus": "Awaiting Analysis", "weaknesses": [{"description": [{"lang": "en", "value": "CWE-125"}], "source": "talos-cna@cisco.com", "type": "Secondary"}]}

{"bugzilla": {"description": "vtk: vtk: Denial of Service via out-of-bounds read in vtkChacoReader", "id": "2563620", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2563620"}, "csaw": false, "cvss3": {"cvss3_base_score": "6.1", "cvss3_scoring_vector": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:H", "status": "draft"}, "cwe": "CWE-125", "details": ["A out-of-bounds read vulnerability exists in the vtkChacoReader InputGraph2 functionality of vtk (version(s): 9.6.1). A specially crafted chaco can lead to an out-of-bounds read. An attacker can provide a malicious file to trigger this vulnerability.", "A flaw was found in VTK. An out-of-bounds read vulnerability in the vtkChacoReader component occurs when processing graph data. By supplying a specially crafted Chaco file, an attacker can trigger an application crash, resulting in a Denial of Service (DoS), or potentially expose sensitive memory contents."], "mitigation": {"lang": "en:us", "value": "No fixed version is available. Avoid processing untrusted Chaco .graph files with vtkChacoReader-based applications (e.g. ParaView); do not open Chaco files from untrusted sources until a fixed VTK release is available."}, "name": "CVE-2026-9535", "public_date": "2026-10-29T18:16:41Z", "references": ["https://www.cve.org/CVERecord?id=CVE-2026-9535\nhttps://nvd.nist.gov/vuln/detail/CVE-2026-9535\nhttps://talosintelligence.com/vulnerability_reports/TALOS-2026-2423\nhttps://vtk.org/download/"], "statement": "This vulnerability is assessed as Moderate rather than Important because triggering the flaw requires user interaction to process an untrusted dataset, limiting the immediate threat to an application crash or localized memory disclosure. VTK is not distributed in core Red Hat Enterprise Linux channels and is primarily consumed via community repositories such as EPEL for specialized visualization tasks. Because the affected parsing routines execute strictly within the context of the user running the visualization tool, the flaw cannot be leveraged for privilege escalation or remote code execution by default.", "threat_severity": "Moderate"}