CVE-2009-2826: Apple Mac OS X

Medium severity, CVSS 6.8. EPSS: 3.3% chance of exploitation in the next 30 days.

Multiple integer overflows in CoreGraphics in Apple Mac OS X 10.5.8 allow remote attackers to execute arbitrary code or cause a denial of service (application crash) via a crafted PDF document that triggers a heap-based buffer overflow.

Affected products

  • Apple Mac OS X: version 10.5.8 only
  • Apple Mac OS X Server: version 10.5.8 only

Published 2009-11-10. Last modified 2026-06-16.