HIGHVulnerability
Verified
Global

CISA KEV: Microsoft DirectX — Microsoft DirectX NULL Byte Overwrite Vulnerability

·Source: CISA KEV

Updated:

Executive Summary

Microsoft DirectX contains a NULL byte overwrite vulnerability in the QuickTime Movie Parser Filter in quartz.dll in DirectShow which could allow remote attackers to execute arbitrary code via a crafted QuickTime media file.

Analysis

Microsoft DirectX contains a NULL byte overwrite vulnerability in the QuickTime Movie Parser Filter in quartz.dll in DirectShow which could allow remote attackers to execute arbitrary code via a crafted QuickTime media file. Added to CISA Known Exploited Vulnerabilities catalog on 2026-05-20. Remediation due: 2026-06-03.

Indicators of Compromise (1)

CVE (1)
CVE-2009-1537
Source Attribution

Originally published by CISA KEV on May 20, 2026. Verified by: CISA.

Related Threats