CVE-2009-0948: Apple Files

Critical severity, CVSS 9.8. EPSS: 1.1% chance of exploitation in the next 30 days.

Multiple buffer overflows in the (1) cdf_read_sat, (2) cdf_read_long_sector_chain, and (3) cdf_read_ssat function in file before 5.02.

Affected products

• Apple Files: before 5.02 (fixed in 5.02)

Published 2021-06-02. Last modified 2026-06-16.