CVE-2013-0252
boost::locale::utf::utf_traits in the Boost.Locale library in Boost 1.48 through 1.52 does not...
boost::locale::utf::utf_traits in the Boost.Locale library in Boost 1.48 through 1.52 does not properly detect certain invalid UTF-8 sequences, which might allow remote attackers to bypass input validation protection mechanisms via crafted trailing bytes.
Exploit likelihood
What each source reports
NVD Score used
boost::locale::utf::utf_traits in the Boost.Locale library in Boost 1.48 through 1.52 does not properly detect certain invalid UTF-8 sequences, which might allow remote attackers to bypass input validation protection mechanisms via crafted trailing bytes.
- Record
CVE-2013-0252- CVSS 2.0
- 5.0 Medium
AV:N/AC:L/Au:N/C:N/I:P/A:N - Weakness
- CWE-20
- Updated
- 2026-11-02
CVE List No score
boost::locale::utf::utf_traits in the Boost.Locale library in Boost 1.48 through 1.52 does not properly detect certain invalid UTF-8 sequences, which might allow remote attackers to bypass input validation protection mechanisms via crafted trailing bytes.
- Record
CVE-2013-0252- Updated
- 2026-11-02
EUVDEUVD-2013-0283 No score
boost::locale::utf::utf_traits in the Boost.Locale library in Boost 1.48 through 1.52 does not properly detect certain invalid UTF-8 sequences, which might allow remote attackers to bypass input validation protection mechanisms via crafted trailing bytes.
- Record
EUVD-2013-0283- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-hvqg-jgxv-hxgm No score
boost::locale::utf::utf_traits in the Boost.Locale library in Boost 1.48 through 1.52 does not...
boost::locale::utf::utf_traits in the Boost.Locale library in Boost 1.48 through 1.52 does not properly detect certain invalid UTF-8 sequences, which might allow remote attackers to bypass input validation protection mechanisms via crafted trailing bytes.
- Record
GHSA-hvqg-jgxv-hxgm- Weakness
- CWE-20
- Updated
- 2026-11-02
Affected products
History
| Recorded | Changed | Sources |
|---|---|---|
| aliases | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2013-0252 is a medium vulnerability (CVSS 5.0) in Boost, published March 12, 2013. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 2.87%, the 86th percentile. No source names a fixed version.
References
lists.fedoraproject.org/pipermail/package-announce/2013-February/099122.html
securityfocus.com/bid/57675
bugs.debian.org/cgi-bin/bugreport.cgi?bug=699649
bugzilla.redhat.com/show_bug.cgi?id=907481
svn.boost.org/trac/boost/ticket/7743
openwall.com/lists/oss-security/2013/02/04/2
Show 7 moreShow less
boost.org/users/news/boost_locale_security_notice.html
ubuntu.com/usn/USN-1727-1
mandriva.com/security/advisories?name=MDVSA-2013:065
nvd.nist.gov/vuln/detail/CVE-2013-0252
github.com/advisories/GHSA-hvqg-jgxv-hxgm