CVE-2013-4290

critical
Published 2014-04-18 · Modified 2026-05-06
CVSS v3
CVSS v2
10.0
VIR risk
10.0

Description

Stack-based buffer overflow in OpenJPEG before 1.5.2 allows remote attackers to have unspecified impact via unknown vectors to (1) lib/openjp3d/opj_jp3d_compress.c, (2) bin/jp3d/convert.c, or (3) lib/openjp3d/event.c.

Predictions

Exploit likelihood
20%
Patch ETA

Heuristic predictions, AS-IS, for prioritization only.

Mitigations

vendor Authored 2026-05-27

Vendor advisory: secalert@redhat.com — http://secunia.com/advisories/57285

Application impact

VendorProductVersionsFixed
uclouvainopenjpeg{"endIncluding":"1.5.1"}
uclouvainopenjpeg1.3
uclouvainopenjpeg1.4
uclouvainopenjpeg1.5

References

CWEs

CWE-119

Verify integrity in audit chain (admin only). AS-IS.