CVE-2009-1935: Freebsd

Medium severity, CVSS 4.9. EPSS: 0.4% chance of exploitation in the next 30 days.

Integer overflow in the pipe_build_write_buffer function (sys/kern/sys_pipe.c) in the direct write optimization feature in the pipe implementation in FreeBSD 7.1 through 7.2 and 6.3 through 6.4 allows local users to bypass virtual-to-physical address lookups and read sensitive information in memory pages via unspecified vectors.

Affected products

• Freebsd Freebsd: version 6.3 only; version 6.3_releng only; version 6.4 only; version 7.1 only; version 7.2 only

Published 2009-06-18. Last modified 2026-06-16.