CVE-2008-0999: Apple Mac OS X

High severity, CVSS 7.1. EPSS: 2.6% chance of exploitation in the next 30 days.

Apple Mac OS X 10.5.2 allows user-assisted attackers to cause a denial of service (crash) via a crafted Universal Disc Format (UDF) disk image, which triggers a NULL pointer dereference.

Affected products

• Apple Mac OS X: version 10.5.2 only
• Apple Mac OS X Server: version 10.5.2 only

Published 2008-03-18. Last modified 2026-06-16.