CVE-2009-1237

Multiple memory leaks in XNU 1228.3.13 and earlier on Apple Mac OS X 10.5.6 and earlier allow...

4.9 MediumPublic exploit

Multiple memory leaks in XNU 1228.3.13 and earlier on Apple Mac OS X 10.5.6 and earlier allow local users to cause a denial of service (kernel memory consumption) via a crafted (1) SYS_add_profil or (2) SYS___mac_getfsstat system call.

Exploit likelihood

0.91%Down 1.0 points since Feb 4, 2022

What each source reports

NVD Score used 4.9

Record: CVE-2009-1237
CVSS 2.0: 4.9 MediumAV:L/AC:L/Au:N/C:N/I:N/A:C
Weakness: CWE-399
Updated: 2026-11-02

CVE List No score

Record: CVE-2009-1237
Updated: 2026-11-02

EUVDEUVD-2009-1236 No score

Record: EUVD-2009-1236
Updated: 2026-11-03

GitHub AdvisoriesGHSA-xqw4-hgfp-f28v No score

Multiple memory leaks in XNU 1228.3.13 and earlier on Apple Mac OS X 10.5.6 and earlier allow...

Record: GHSA-xqw4-hgfp-f28v
Updated: 2026-11-02

Affected products

Public exploits

Links only. Every CVE stores no exploit code.

Public exploits
Source	Link	Date
Exploit-DB	Apple Mac OSX xnu 1228.3.13 - 'macfsstat' Local Kernel Memory Leak/Denial of Service	2009-03-23
Exploit-DB	Apple Mac OSX xnu 1228.3.13 - 'Profil' Kernel Memory Leak/Denial of Service (PoC)	2009-03-23

History

History
Recorded	Changed	Sources
Nov 3, 2026	aliases	EUVD
Nov 2, 2026	first indexed	CVE List, Exploit-DB, GitHub Advisories, NVD

Dates are when Every CVE recorded each change. Upstream dates may differ.

In short

CVE-2009-1237 is a medium vulnerability (CVSS 4.9) in Apple Mac Os X, published April 2, 2009. Public exploit code exists. EPSS puts the chance of exploitation in the next 30 days at 0.91%, the 60th percentile. No source names a fixed version.