VULNERABILITY INTELLIGENCE

CVE-2009-2369

CVSS score6.8 MEDIUM
EPSS probability2.82%
CISA KEVNot currently listed
Published2009-07-08
Last modified2026-06-16
CVSS vectorAV:N/AC:M/Au:N/C:P/I:P/A:P

Description

Integer overflow in the wxImage::Create function in src/common/image.cpp in wxWidgets 2.8.10 allows attackers to cause a denial of service (crash) and possibly execute arbitrary code via a crafted JPEG file, which triggers a heap-based buffer overflow. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information.

Primary references