A memory corruption vulnerability exists in the vtkDEMReader ReadProfiles functionality of vtk (version(s): 9.6.1). A specially crafted USGS DEM can lead to a buffer overflow. An attacker can provide a malicious file to trigger this vulnerability.
| CVE | CVE-2026-8822 |
|---|---|
| Severidad | HIGH |
| CVSS | 7.5 / 10 |
| EPSS | 0.3% en 30 días (percentil 24) |
| CWE | CWE-787 |
| Exposición (Shodan) | sin hosts expuestos detectados actualmente |