CVE-2009-1364: Use-after-free vulnerability in the embedded GD library in libwmf 0.2.8.4 allows context-dependent attacker...

Security readout for executives and security teams

CVE-2009-1364 is an old memory-safety flaw in libwmf 0.2.8.4. A malicious WMF image file could crash an application that processes it, and the CVE record says arbitrary code execution may be possible. Business risk is mainly in systems that still parse untrusted WMF files with vulnerable libwmf packages. Exposure is most likely on legacy Linux systems or applications that still use libwmf 0.2.8.4 to render or convert WMF files, especially where files come from users, email, uploads, archives, or document-processing pipelines. Treat as a legacy exposure cleanup item unless WMF processing is internet-facing or fed by untrusted files. Prioritize patching document conversion, upload, email, and image-processing services first. Mitigation focus: Update libwmf packages using the relevant Linux vendor advisory.; Check vendor guidance for supported fixed package versions.; Restrict processing of untrusted WMF files until affected systems are updated..

Prepared

Jun 28, 2026, 11:04 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.