CVE-2006-1552: Apple Imageio

Medium severity, CVSS 5.0. EPSS: 4.4% chance of exploitation in the next 30 days.

Integer overflow in ImageIO in Apple Mac OS X 10.4 up to 10.4.5 allows remote attackers to cause a denial of service (crash) via a crafted JPEG image with malformed JPEG metadata, as demonstrated using Safari, aka "Deja-Doom".

Affected products

• Apple Imageio: any version
• Apple Mac OS X: version 10.4 only; version 10.4.1 only; version 10.4.2 only; version 10.4.3 only; version 10.4.4 only; version 10.4.5 only
• Apple Mac OS X Server: version 10.4 only; version 10.4.1 only; version 10.4.2 only; version 10.4.3 only; version 10.4.4 only; version 10.4.5 only
• Apple Safari: version 1.0 only; version 1.1 only; version 1.2 only; version 1.2.1 only; version 1.2.2 only; version 1.2.3 only; …

Published 2006-03-31. Last modified 2026-06-16.