CVE-2008-2304: Apple Core Image Fun House

Medium severity, CVSS 6.8. EPSS: 5.7% chance of exploitation in the next 30 days.

Buffer overflow in Apple Core Image Fun House 2.0 and earlier in CoreImage Examples in Xcode tools before 3.1 allows user-assisted attackers to execute arbitrary code or cause a denial of service (application crash) via a .funhouse file with a string XML element that contains many characters.

Affected products

• Apple Core Image Fun House: up to and including 2.0

Published 2008-07-14. Last modified 2026-06-16.