Kitware VTK (Visualization Toolkit) versions through 9.5.0 have a heap buffer overflow vulnerability in the vtkGLTFDocumentLoader component. This occurs when processing specially crafted GLTF files, where the copy constructor of Accessor objects does not properly validate buffer boundaries before memory reads. The vulnerability has a high severity score and can lead to a denial of service or potential memory corruption.