Every CVE Search/ Get API key

CVE-2013-1447

OpenJPEG 1.3 and earlier allows remote attackers to cause a denial of service (memory consumption...

5.0 Medium

OpenJPEG 1.3 and earlier allows remote attackers to cause a denial of service (memory consumption or crash) via unspecified vectors related to NULL pointer dereferences, division-by-zero, and other errors.

Exploit likelihood

2.50%Up 1.3 points since Feb 4, 2022
90%50%10%1%

What each source reports

NVD Score used 5.0

OpenJPEG 1.3 and earlier allows remote attackers to cause a denial of service (memory consumption or crash) via unspecified vectors related to NULL pointer dereferences, division-by-zero, and other errors.

Record
CVE-2013-1447
CVSS 2.0
5.0 MediumAV:N/AC:L/Au:N/C:N/I:N/A:P
Updated
2026-11-02
CVE List No score

OpenJPEG 1.3 and earlier allows remote attackers to cause a denial of service (memory consumption or crash) via unspecified vectors related to NULL pointer dereferences, division-by-zero, and other errors.

Record
CVE-2013-1447
Updated
2026-11-02
EUVDEUVD-2013-1483 No score

OpenJPEG 1.3 and earlier allows remote attackers to cause a denial of service (memory consumption or crash) via unspecified vectors related to NULL pointer dereferences, division-by-zero, and other errors.

Record
EUVD-2013-1483
Updated
2026-11-03
GitHub AdvisoriesGHSA-ccpm-4wxg-wxgf No score

OpenJPEG 1.3 and earlier allows remote attackers to cause a denial of service (memory consumption...

OpenJPEG 1.3 and earlier allows remote attackers to cause a denial of service (memory consumption or crash) via unspecified vectors related to NULL pointer dereferences, division-by-zero, and other errors.

Record
GHSA-ccpm-4wxg-wxgf
Updated
2026-11-02
OSVRHSA-2013:1850 7.5

Red Hat Security Advisory: openjpeg security update

Record
RHSA-2013:1850
CVSS 3.0
7.5 HighCVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVMGASA-2014-0005 No score

Updated openjpeg package fixes security vulnerabilities

Multiple heap-based buffer overflow flaws were found in OpenJPEG. An attacker could create a specially crafted OpenJPEG image that, when opened, could cause an application using openjpeg to crash or, possibly, execute arbitrary code with the privileges of the user running the application (CVE-2013-6045).

Multiple denial of service flaws were found in OpenJPEG. An attacker could create a specially crafted OpenJPEG image that, when opened, could cause an application using openjpeg to crash (CVE-2013-1447, CVE-2013-6052, CVE-2013-6053, CVE-2013-6887).

Record
MGASA-2014-0005
Updated
2026-11-02
OSVopenSUSE-SU-2024:10227-1 No score

libopenjpeg1-1.5.2-4.7 on GA media

These are all security issues fixed in the libopenjpeg1-1.5.2-4.7 package on the GA media of openSUSE Tumbleweed.

Record
openSUSE-SU-2024:10227-1
Updated
2026-11-02
OSVUBUNTU-CVE-2013-1447 No score

OpenJPEG 1.3 and earlier allows remote attackers to cause a denial of service (memory consumption or crash) via unspecified vectors related to NULL pointer dereferences, division-by-zero, and other errors.

Record
UBUNTU-CVE-2013-1447
Updated
2026-11-02

Affected products

Affected packages

Affected packages
PackageAffectedFixed
openjpeg
Debian:6.0
From an advisory covering 4 CVEs
 before 1.3+dfsg-4+squeeze2, plus listed versions
1.3+dfsg-41.3+dfsg-4+squeeze1
1.3+dfsg-4+squeeze2
openjpeg
Debian:7
From an advisory covering 4 CVEs
 before 1.3+dfsg-4.7, plus listed versions
1.3+dfsg-4.6
1.3+dfsg-4.7
openjpeg
Mageia:3
From an advisory covering 5 CVEs
 before 1.5.1-3.1.mga3
1.5.1-3.1.mga3
openjpeg
Red Hat:enterprise_linux:6::client
From an advisory covering 4 CVEs
 before 0:1.3-10.el6_5
0:1.3-10.el6_5
openjpeg-debuginfo
Red Hat:enterprise_linux:6::client
From an advisory covering 4 CVEs
 before 0:1.3-10.el6_5
0:1.3-10.el6_5
openjpeg-libs
Red Hat:enterprise_linux:6::client
From an advisory covering 4 CVEs
 before 0:1.3-10.el6_5
0:1.3-10.el6_5
openjpeg-devel
Red Hat:enterprise_linux:6::client
From an advisory covering 4 CVEs
 before 0:1.3-10.el6_5
0:1.3-10.el6_5
openjpeg
Red Hat:enterprise_linux:6::computenode
From an advisory covering 4 CVEs
 before 0:1.3-10.el6_5
0:1.3-10.el6_5
openjpeg-debuginfo
Red Hat:enterprise_linux:6::computenode
From an advisory covering 4 CVEs
 before 0:1.3-10.el6_5
0:1.3-10.el6_5
openjpeg-libs
Red Hat:enterprise_linux:6::computenode
From an advisory covering 4 CVEs
 before 0:1.3-10.el6_5
0:1.3-10.el6_5
Show 9 moreShow less
Affected packages
PackageAffectedFixed
openjpeg-devel
Red Hat:enterprise_linux:6::computenode
From an advisory covering 4 CVEs
 before 0:1.3-10.el6_5
0:1.3-10.el6_5
openjpeg
Red Hat:enterprise_linux:6::server
From an advisory covering 4 CVEs
 before 0:1.3-10.el6_5
0:1.3-10.el6_5
openjpeg-debuginfo
Red Hat:enterprise_linux:6::server
From an advisory covering 4 CVEs
 before 0:1.3-10.el6_5
0:1.3-10.el6_5
openjpeg-libs
Red Hat:enterprise_linux:6::server
From an advisory covering 4 CVEs
 before 0:1.3-10.el6_5
0:1.3-10.el6_5
openjpeg-devel
Red Hat:enterprise_linux:6::server
From an advisory covering 4 CVEs
 before 0:1.3-10.el6_5
0:1.3-10.el6_5
openjpeg
Red Hat:enterprise_linux:6::workstation
From an advisory covering 4 CVEs
 before 0:1.3-10.el6_5
0:1.3-10.el6_5
openjpeg-debuginfo
Red Hat:enterprise_linux:6::workstation
From an advisory covering 4 CVEs
 before 0:1.3-10.el6_5
0:1.3-10.el6_5
openjpeg-libs
Red Hat:enterprise_linux:6::workstation
From an advisory covering 4 CVEs
 before 0:1.3-10.el6_5
0:1.3-10.el6_5
openjpeg-devel
Red Hat:enterprise_linux:6::workstation
From an advisory covering 4 CVEs
 before 0:1.3-10.el6_5
0:1.3-10.el6_5

History

History
RecordedChangedSources
affected, facts
affected
aliasesEUVD
first indexedCVE List, GitHub Advisories, NVD, OSV

Dates are when Every CVE recorded each change. Upstream dates may differ.

In short

CVE-2013-1447 is a medium vulnerability (CVSS 5.0) in Uclouvain Openjpeg, published December 3, 2013. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 2.50%, the 84th percentile. No source names a fixed version.

References

Show 34 moreShow less
Pages All vulnerabilities Browse Docs Sources Guide Get API key
MoveEnter Open