CVE-2009-2369
Integer overflow in the wxImage::Create function in src/common/image.cpp in wxWidgets 2.8.10...
Integer overflow in the wxImage::Create function in src/common/image.cpp in wxWidgets 2.8.10 allows attackers to cause a denial of service (crash) and possibly execute arbitrary code via a crafted JPEG file, which triggers a heap-based buffer overflow. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information.
Exploit likelihood
What each source reports
NVD Score used
Integer overflow in the wxImage::Create function in src/common/image.cpp in wxWidgets 2.8.10 allows attackers to cause a denial of service (crash) and possibly execute arbitrary code via a crafted JPEG file, which triggers a heap-based buffer overflow. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information.
- Record
CVE-2009-2369- CVSS 2.0
- 6.8 Medium
AV:N/AC:M/Au:N/C:P/I:P/A:P - Weakness
- CWE-189
- Updated
- 2026-11-02
CVE List No score
Integer overflow in the wxImage::Create function in src/common/image.cpp in wxWidgets 2.8.10 allows attackers to cause a denial of service (crash) and possibly execute arbitrary code via a crafted JPEG file, which triggers a heap-based buffer overflow. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information.
- Record
CVE-2009-2369- Updated
- 2026-11-02
EUVDEUVD-2009-2365 No score
Integer overflow in the wxImage::Create function in src/common/image.cpp in wxWidgets 2.8.10 allows attackers to cause a denial of service (crash) and possibly execute arbitrary code via a crafted JPEG file, which triggers a heap-based buffer overflow. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information.
- Record
EUVD-2009-2365- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-66qh-59pw-qjhv No score
Integer overflow in the wxImage::Create function in src/common/image.cpp in wxWidgets 2.8.10...
Integer overflow in the wxImage::Create function in src/common/image.cpp in wxWidgets 2.8.10 allows attackers to cause a denial of service (crash) and possibly execute arbitrary code via a crafted JPEG file, which triggers a heap-based buffer overflow. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information.
- Record
GHSA-66qh-59pw-qjhv- Updated
- 2026-11-02
Affected products
Affected packages
| Package | Affected | Fixed |
|---|---|---|
wxwidgets2.6Debian:4.0 |
before 2.6.3.2.1.5+etch1, plus listed versions 2.6.3.2.1.5 |
2.6.3.2.1.5+etch1 |
wxwindows2.4Debian:4.0 |
before 2.4.5.1.1+etch1, plus listed versions 2.4.5.1.1 |
2.4.5.1.1+etch1 |
wxwidgets2.8Debian:5.0 |
before 2.8.7.1-1.1+lenny1, plus listed versions 2.8.7.1-1.12.8.7.1-1.1+hurd.1 |
2.8.7.1-1.1+lenny1 |
wxwidgets2.6Debian:5.0 |
before 2.6.3.2.2-3+lenny1, plus listed versions 2.6.3.2.2-3 |
2.6.3.2.2-3+lenny1 |
History
| Recorded | Changed | Sources |
|---|---|---|
| aliases | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD, OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2009-2369 is a medium vulnerability (CVSS 6.8) in Wxwidgets, published July 8, 2009. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 2.82%, the 86th percentile. Fixed in wxwidgets2.6 2.6.3.2.1.5+etch1.