{"id":"UBUNTU-CVE-2026-9535","details":"A out-of-bounds read vulnerability exists in the vtkChacoReader InputGraph2 functionality of vtk (version(s): 9.6.1). A specially crafted chaco can lead to an out-of-bounds read. An attacker can provide a malicious file to trigger this vulnerability.","modified":"2026-11-04T03:30:37.273329379Z","published":"2026-11-03T00:00:00Z","upstream":["CVE-2026-9535"],"references":[{"type":"REPORT","url":"https://ubuntu.com/security/CVE-2026-9535"},{"type":"REPORT","url":"https://www.cve.org/CVERecord?id=CVE-2026-9535"},{"type":"REPORT","url":"https://talosintelligence.com/vulnerability_reports/TALOS-2026-2423"},{"type":"REPORT","url":"https://vtk.org/download/"}],"affected":[{"package":{"name":"vtk9","ecosystem":"Ubuntu:22.04:LTS","purl":"pkg:deb/ubuntu/vtk9?arch=source&distro=jammy"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["9.0.1+dfsg1-8","9.1.0+really9.0.3+dfsg1-4","9.1.0+really9.0.3+dfsg1-4build1","9.1.0+really9.1.0+dfsg2-3","9.1.0+really9.1.0+dfsg2-3build1"],"ecosystem_specific":{"binaries":[{"binary_version":"9.1.0+really9.1.0+dfsg2-3build1","binary_name":"libvtk9-java"},{"binary_name":"libvtk9.1","binary_version":"9.1.0+really9.1.0+dfsg2-3build1"},{"binary_name":"libvtk9.1-qt","binary_version":"9.1.0+really9.1.0+dfsg2-3build1"},{"binary_name":"python3-vtk9","binary_version":"9.1.0+really9.1.0+dfsg2-3build1"},{"binary_name":"vtk9","binary_version":"9.1.0+really9.1.0+dfsg2-3build1"},{"binary_name":"vtk9-examples","binary_version":"9.1.0+really9.1.0+dfsg2-3build1"}]},"database_specific":{"source":"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2026/UBUNTU-CVE-2026-9535.json"}},{"package":{"name":"vtk9","ecosystem":"Ubuntu:24.04:LTS","purl":"pkg:deb/ubuntu/vtk9?arch=source&distro=noble"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["9.1.0+really9.1.0+dfsg2-7","9.1.0+really9.1.0+dfsg2-7build1","9.1.0+really9.1.0+dfsg2-7.1build2","9.1.0+really9.1.0+dfsg2-7.1build3"],"ecosystem_specific":{"binaries":[{"binary_name":"libvtk9-java","binary_version":"9.1.0+really9.1.0+dfsg2-7.1build3"},{"binary_name":"libvtk9.1t64","binary_version":"9.1.0+really9.1.0+dfsg2-7.1build3"},{"binary_name":"libvtk9.1t64-qt","binary_version":"9.1.0+really9.1.0+dfsg2-7.1build3"},{"binary_version":"9.1.0+really9.1.0+dfsg2-7.1build3","binary_name":"python3-vtk9"},{"binary_name":"vtk9","binary_version":"9.1.0+really9.1.0+dfsg2-7.1build3"},{"binary_name":"vtk9-examples","binary_version":"9.1.0+really9.1.0+dfsg2-7.1build3"}]},"database_specific":{"source":"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2026/UBUNTU-CVE-2026-9535.json"}},{"package":{"name":"vtk9","ecosystem":"Ubuntu:26.10","purl":"pkg:deb/ubuntu/vtk9?arch=source&distro=stonking"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["9.5.2+dfsg4-3ubuntu1","9.6.2+dfsg1-5"],"ecosystem_specific":{"binaries":[{"binary_name":"libvtk9-java","binary_version":"9.6.2+dfsg1-5"},{"binary_version":"9.6.2+dfsg1-5","binary_name":"libvtk9.6"},{"binary_version":"9.6.2+dfsg1-5","binary_name":"libvtk9.6-qt"},{"binary_name":"python3-vtk9","binary_version":"9.6.2+dfsg1-5"},{"binary_name":"vtk9","binary_version":"9.6.2+dfsg1-5"},{"binary_name":"vtk9-examples","binary_version":"9.6.2+dfsg1-5"}]},"database_specific":{"source":"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2026/UBUNTU-CVE-2026-9535.json"}},{"package":{"name":"vtk9","ecosystem":"Ubuntu:26.04:LTS","purl":"pkg:deb/ubuntu/vtk9?arch=source&distro=resolute"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["9.3.0+dfsg1-4ubuntu2","9.5.2+dfsg2-4ubuntu1","9.5.2+dfsg3-8ubuntu1","9.5.2+dfsg4-2ubuntu1","9.5.2+dfsg4-3ubuntu1"],"ecosystem_specific":{"binaries":[{"binary_version":"9.5.2+dfsg4-3ubuntu1","binary_name":"libvtk9-java"},{"binary_name":"libvtk9.5","binary_version":"9.5.2+dfsg4-3ubuntu1"},{"binary_name":"libvtk9.5-qt","binary_version":"9.5.2+dfsg4-3ubuntu1"},{"binary_name":"python3-vtk9","binary_version":"9.5.2+dfsg4-3ubuntu1"},{"binary_version":"9.5.2+dfsg4-3ubuntu1","binary_name":"vtk9"},{"binary_version":"9.5.2+dfsg4-3ubuntu1","binary_name":"vtk9-examples"}]},"database_specific":{"source":"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2026/UBUNTU-CVE-2026-9535.json"}}],"schema_version":"1.9.2","severity":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H"},{"type":"Ubuntu","score":"medium"}]}