Is CVE-2026-8822 exploited in the wild?

No. Junglewise Threat Intelligence has no report of CVE-2026-8822 being exploited in the wild.

How severe is CVE-2026-8822?

High severity, with a CVSS score of 7.5, published 29 October 2026.

Is there a fix for CVE-2026-8822?

Yes: fixed in VTK 9.6.2, 9.7.1. Junglewise finds every place you run it, drafts the upgrade and applies it once you approve.

How is CVE-2026-8822 attacked?

It is attacked over the network.

Am I affected by CVE-2026-8822?

Check whether you run Kitware VTK at an affected version. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.

CVE-2026-8822: VTK vtkDEMReader buffer overflow in ReadProfiles

CVE-2026-8822 · Severity: high · CVSS 7.5 · Published 2026-10-29

VTK is an open-source 3D visualization and image processing library used in scientific and engineering applications. A buffer overflow vulnerability in the USGS DEM file reader allows an attacker to cause a denial of service or potentially execute code by providing a specially crafted elevation model file that triggers out-of-bounds memory writes.

Technologies: Kitware VTK. Vendors: Kitware.

Quick answers

Is CVE-2026-8822 exploited in the wild?: No. Junglewise Threat Intelligence has no report of CVE-2026-8822 being exploited in the wild.
How severe is CVE-2026-8822?: High severity, with a CVSS score of 7.5, published 29 October 2026.
Which products and versions are affected?: Kitware VTK 9.6.1.
Is there a fix for CVE-2026-8822?: Yes: fixed in VTK 9.6.2, 9.7.1. Junglewise finds every place you run it, drafts the upgrade and applies it once you approve.
How is CVE-2026-8822 attacked?: It is attacked over the network.
Am I affected by CVE-2026-8822?: Check whether you run Kitware VTK at an affected version. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.

How to fix

Fixed in: VTK 9.6.2, 9.7.1

Technical details

The vtkDEMReader::ReadProfiles function fails to validate record geometry parameters from specially crafted USGS DEM files, leading to a heap buffer overflow. An attacker-controlled row or column size in the B-record prefix can cause writes beyond the allocated scalar buffer. The vulnerability requires a local file read operation (file-based attack vector) but no authentication or user interaction beyond opening a malicious DEM file.

Affected products

Kitware VTK 9.6.1

Timeline

2026-10-29: disclosed

References

This page as Markdown. Free to reuse under CC BY 4.0 with a link back.