{"id":"CVE-2026-8824","kind":"vulnerability","aliases":["CVE-2026-8824"],"related":[],"title":"VTK: crafted BMP file triggers buffer overflow in vtkBMPReader","description":"A memory corruption vulnerability exists in the vtkBMPReader ExecuteDataWithInformation functionality of vtk (version(s): 9.6.1). A specially crafted .bmp file can lead to a buffer overflow. An attacker can provide a malicious file to trigger this vulnerability.","summary":"VTK, the Visualization Toolkit library, has a memory corruption flaw in its BMP image reader. A specially crafted .bmp file can overflow a buffer, and an attacker who supplies such a file can trigger it.","severity":"high","cvss":7.5,"epss":null,"exploited":false,"exploited_at":null,"products":[{"name":"vtk","fixed":[],"affected":"9.6.1","ecosystem":"pypi"}],"ecosystems":[],"tags":["medical-imaging","package","python","scientific-computing","vtk"],"not_affected_if":["no-untrusted-bmp-input","not-using-vtkbmpreader"],"how_to_check":"Run python -c \"import vtk; print(vtk.VTK_VERSION)\" and see whether it is 9.6.1. Search your code for vtkBMPReader or for readers that pick the format from the file extension, and see whether they get untrusted .bmp files.","fix":null,"status":"open","published_at":"2026-10-29T19:17:28+00:00","first_seen_at":"2026-10-29T19:26:48+00:00","triaged_at":"2026-10-29T19:27:20+00:00","updated_at":"2026-10-29T19:28:30+00:00","category":"package","confidence":0.6,"triage":{"at":"2026-10-29T19:27:20Z","model":"claude-haiku-5-5","output":{"fix":"unknown","reach":"unknown","title":"VTK: crafted BMP file triggers buffer overflow in vtkBMPReader","impact":"high","summary":"VTK, the Visualization Toolkit library, has a memory corruption flaw in its BMP image reader. A specially crafted .bmp file can overflow a buffer, and an attacker who supplies such a file can trigger it.","audience":"developers","category":"package","nicknames":[],"who_cares":["vtk","python","scientific-computing","medical-imaging"],"confidence":0.6,"fix_status":"unknown","needs_auth":"unknown","worst_case":"memory corruption that may let attacker run code","analyst_note":"Confirm fixed VTK version and whether other versions are affected, using the NVD entry at https://nvd.nist.gov/vuln/detail/CVE-2026-8824 and the upstream VTK advisory.","how_to_check":"- Check the installed VTK version (for example `python -c \"import vtk; print(vtk.VTK_VERSION)\"`) and see whether it is `9.6.1`.\n- Look for code that opens user-supplied .bmp files with vtkBMPReader.","plain_action":"","needs_analyst":true,"not_affected_if":["no-untrusted-bmp-input"],"who_is_affected":"Affected version reported as VTK 9.6.1. Exposure depends on whether an application reads .bmp files that an outside party can supply through vtkBMPReader. Teams that only process trusted local images, or do not use VTK's BMP reader, are less exposed. unknown whether other versions are affected.","user_interaction":"unknown","needs_special_setup":"unknown","severity_if_unknown":"high"},"cost_usd":0.000708,"input_tokens":4130,"output_tokens":590,"severity_before":"high"},"analyst_status":"done","analyst_note":"Confirm fixed VTK version and whether other versions are affected, using the NVD entry at https://nvd.nist.gov/vuln/detail/CVE-2026-8824 and the upstream VTK advisory.","search":"'-2026':11A,14A '-8824':12A,15A '9.6.1':74C 'attack':52B,87C 'bmp':3A,38B,44B,78C 'buffer':6A,49B,84C 'comput':24B 'corrupt':34B,62C 'craft':2A,43B,77C 'cve':10A,13A 'executedatawithinform':68C 'exist':64C 'file':4A,45B,57B,79C,92C 'flaw':35B 'function':69C 'imag':19B,39B 'lead':81C 'librari':30B 'malici':91C 'medic':18B 'medical-imag':17B 'memori':33B,61C 'overflow':7A,47B,85C 'packag':20B 'provid':89C 'python':21B 'reader':40B 'scientif':23B 'scientific-comput':22B 'special':42B,76C 'suppli':54B 'toolkit':29B 'trigger':5A,59B,94C 'version':72C 'visual':28B 'vtk':1A,16A,25B,26B,71C 'vtkbmpreader':9A,67C 'vulner':63C,96C","nicknames":[],"mitigations":[],"who_affected":"Applications that parse .bmp files from outside sources with vtkBMPReader in VTK 9.6.1, such as image pipelines, medical or scientific viewers and upload services. Other versions are not listed as affected, but that has not been tested. You can skip it if you only read trusted images or never use vtkBMPReader.","tier":"B","verified":{},"analyst_revisit_at":null,"fix_status":"none","audience":"developers","plain_action":null,"first_public_at":"2026-10-29T19:17:28+00:00","kev":null,"cvss_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss_by":"talos-cna@cisco.com","poc_count":0,"sources":[{"source":"nvd","external_id":"CVE-2026-8824","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-8824","severity":null,"published_at":"2026-10-29T19:17:28+00:00","modified_at":"2026-10-29T19:17:28+00:00","first_seen_at":"2026-10-29T19:26:48+00:00","fetched_at":"2026-10-29T19:26:48+00:00","note":null},{"source":"analyst","external_id":"CVE-2026-8824:1099","url":null,"severity":null,"published_at":"2026-10-29T19:28:30+00:00","modified_at":"2026-10-29T19:28:30+00:00","first_seen_at":"2026-10-29T19:28:30+00:00","fetched_at":"2026-10-29T19:28:30+00:00","note":"Talos-reported (Emmanuel Tacheau), CWE-787, CVSS 7.5 by Talos CNA. Only 9.6.1 is listed affected ('guessed' CPE); no fixed VTK version found: VTK has no advisory for it and the Talos report page was not retrievable. No exploitation or PoC found. Nothing verified. Settling it needs the Talos report or a Kitware GitLab fix MR."}],"documents":[{"id":18901,"url":"https://cve.circl.lu/vuln/CVE-2026-8824","title":"CVE-2026-8824 CVE record (Talos CNA) via Vulnerability-Lookup","kind":"advisory","source":"analyst","publisher":null,"text":null,"published_at":null,"relation":"advisory","confidence":null,"note":null},{"id":18902,"url":"https://discourse.vtk.org/t/vtk-9-6-1-release/16356","title":"VTK 9.6.1 release announcement","kind":"release","source":"analyst","publisher":null,"text":null,"published_at":null,"relation":"mentions","confidence":null,"note":null}],"notice":"Free to read at a human pace. An API with keys and an MCP server are in preparation; early access: hello@infrastack.ai"}