Skip to content
OpenAdvisories
Critical · 9.4 CVE-2026-4739 EUVD-2026-14707GHSA-9vxh-wwmc-c2m7

Integer overflow vulnerabilities in InsightSoftwareConsortium/ITK

Published Mar 24, 2026 · Updated Mar 24, 2026 · Assigned by GovTech CSG

Description

Integer Overflow or Wraparound vulnerability in InsightSoftwareConsortium ITK (‎Modules/ThirdParty/Expat/src/expat modules).This issue affects ITK: before 2.7.1.

Affected products

VendorProductAffectedFixed
InsightSoftwareConsortium ITK — —

Fixed in Linux distributions

Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.

ReleasePackageFixed inAdvisory
Debian 14 insighttoolkit5 No fix yet —
Debian 13 insighttoolkit5 No fix yet —
Debian 12 insighttoolkit4 +1 No fix yet —
ReleasePackageFixed inAdvisory
Ubuntu 26.10 matanza No fix yet —
Ubuntu 26.04 LTS matanza No fix yet —
Ubuntu 25.10 tdom +6 No fix yet —
Ubuntu 24.04 LTS matanza No fix yet —
Ubuntu 22.04 LTS matanza No fix yet —
Show 1 more (older releases, extended support, other products)
ReleasePackageFixed inAdvisory
Ubuntu 20.04 LTS matanza No fix yet —

References