CVE-2026-9536
High · 7.5CVSS
7.5
EPSS
0.3%
Published
Oct 29, 2026
CISA due date
—
The record
A heap-based buffer overflow vulnerability exists in the vtkWindBladeReader FindVariableOffsets functionality of vtk (version(s): 9.6.1). A specially crafted .wind can lead to a buffer overflow. An attacker can provide a malicious file to trigger this vulnerability.
Affected packages
| Ecosystem | Package | Introduced | Fixed |
|---|
Related vulnerabilities
- CVE-2026-119727 A flaw was found in GStreamer's gst-plugins-bad H.265 video parser. CWE-122
- CVE-2026-110133 A flaw was found in Ghostscript. CWE-122
- CVE-2026-96198 Heap-based buffer overflow in Microsoft Edge (Chromium-based) allows an unauthorized… CWE-122
- CVE-2026-96199 Heap-based buffer overflow in Microsoft Edge (Chromium-based) allows an unauthorized… CWE-122
- CVE-2026-85897 Heap-based buffer overflow in Microsoft Edge (Chromium-based) allows an unauthorized… CWE-122
- CVE-2026-119124 ImageMagick before 7.1.2-34 contains a heap-based buffer overflow in its -morph… CWE-122
- CVE-2026-93523 A heap buffer overflow caused by a XIPassiveUngrabDevice request with an out-of-range… CWE-122
- CVE-2026-93536 A use after free caused by missing lifecycle management of gesture sprites in… CWE-122