Every CVESearch/Get API key

CVE-2013-1447

OpenJPEG 1.3 and earlier allows remote attackers to cause a denial of service (memory consumption...

5.0 Medium

CVE-2013-1447 is a medium vulnerability (CVSS 5.0) in Uclouvain Openjpeg, published December 3, 2013. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 2.50%, the 84th percentile. No source names a fixed version.

Severity
5.0 MediumCVSS 2.0, NVD
Exploit chance
2.50%EPSS, 84th percentile
Exploitation
None knownNot on CISA’s or ENISA’s lists
Fixed in
No fix listedNo source names one

Description

OpenJPEG 1.3 and earlier allows remote attackers to cause a denial of service (memory consumption or crash) via unspecified vectors related to NULL pointer dereferences, division-by-zero, and other errors.

Exploit likelihood

2.50%Up 1.3 points since Feb 4, 2022
90%50%10%1%

Affected products

Affected packages

Affected packages
PackageAffectedFixed
openjpeg
Debian:6.0
From an advisory covering 4 CVEs
before 1.3+dfsg-4+squeeze2, plus listed versions
1.3+dfsg-41.3+dfsg-4+squeeze1
1.3+dfsg-4+squeeze2
openjpeg
Debian:7
From an advisory covering 4 CVEs
before 1.3+dfsg-4.7, plus listed versions
1.3+dfsg-4.6
1.3+dfsg-4.7
openjpeg
Mageia:3
From an advisory covering 5 CVEs
before 1.5.1-3.1.mga3
1.5.1-3.1.mga3
openjpeg
Red Hat:enterprise_linux:6::client
From an advisory covering 4 CVEs
before 0:1.3-10.el6_5
0:1.3-10.el6_5
openjpeg-debuginfo
Red Hat:enterprise_linux:6::client
From an advisory covering 4 CVEs
before 0:1.3-10.el6_5
0:1.3-10.el6_5
openjpeg-libs
Red Hat:enterprise_linux:6::client
From an advisory covering 4 CVEs
before 0:1.3-10.el6_5
0:1.3-10.el6_5
openjpeg-devel
Red Hat:enterprise_linux:6::client
From an advisory covering 4 CVEs
before 0:1.3-10.el6_5
0:1.3-10.el6_5
openjpeg
Red Hat:enterprise_linux:6::computenode
From an advisory covering 4 CVEs
before 0:1.3-10.el6_5
0:1.3-10.el6_5
openjpeg-debuginfo
Red Hat:enterprise_linux:6::computenode
From an advisory covering 4 CVEs
before 0:1.3-10.el6_5
0:1.3-10.el6_5
openjpeg-libs
Red Hat:enterprise_linux:6::computenode
From an advisory covering 4 CVEs
before 0:1.3-10.el6_5
0:1.3-10.el6_5
Show 9 moreShow less
Affected packages
PackageAffectedFixed
openjpeg-devel
Red Hat:enterprise_linux:6::computenode
From an advisory covering 4 CVEs
before 0:1.3-10.el6_5
0:1.3-10.el6_5
openjpeg
Red Hat:enterprise_linux:6::server
From an advisory covering 4 CVEs
before 0:1.3-10.el6_5
0:1.3-10.el6_5
openjpeg-debuginfo
Red Hat:enterprise_linux:6::server
From an advisory covering 4 CVEs
before 0:1.3-10.el6_5
0:1.3-10.el6_5
openjpeg-libs
Red Hat:enterprise_linux:6::server
From an advisory covering 4 CVEs
before 0:1.3-10.el6_5
0:1.3-10.el6_5
openjpeg-devel
Red Hat:enterprise_linux:6::server
From an advisory covering 4 CVEs
before 0:1.3-10.el6_5
0:1.3-10.el6_5
openjpeg
Red Hat:enterprise_linux:6::workstation
From an advisory covering 4 CVEs
before 0:1.3-10.el6_5
0:1.3-10.el6_5
openjpeg-debuginfo
Red Hat:enterprise_linux:6::workstation
From an advisory covering 4 CVEs
before 0:1.3-10.el6_5
0:1.3-10.el6_5
openjpeg-libs
Red Hat:enterprise_linux:6::workstation
From an advisory covering 4 CVEs
before 0:1.3-10.el6_5
0:1.3-10.el6_5
openjpeg-devel
Red Hat:enterprise_linux:6::workstation
From an advisory covering 4 CVEs
before 0:1.3-10.el6_5
0:1.3-10.el6_5

What each source reports

NVD Score used5.0

OpenJPEG 1.3 and earlier allows remote attackers to cause a denial of service (memory consumption or crash) via unspecified vectors related to NULL pointer dereferences, division-by-zero, and other errors.

Record
CVE-2013-1447
CVSS 2.0
5.0 MediumAV:N/AC:L/Au:N/C:N/I:N/A:P
Updated
2026-11-02
CVE ListNo score

OpenJPEG 1.3 and earlier allows remote attackers to cause a denial of service (memory consumption or crash) via unspecified vectors related to NULL pointer dereferences, division-by-zero, and other errors.

Record
CVE-2013-1447
Updated
2026-11-02
EUVDEUVD-2013-1483No score

OpenJPEG 1.3 and earlier allows remote attackers to cause a denial of service (memory consumption or crash) via unspecified vectors related to NULL pointer dereferences, division-by-zero, and other errors.

Record
EUVD-2013-1483
Updated
2026-11-03
GitHub AdvisoriesGHSA-ccpm-4wxg-wxgfNo score

OpenJPEG 1.3 and earlier allows remote attackers to cause a denial of service (memory consumption...

OpenJPEG 1.3 and earlier allows remote attackers to cause a denial of service (memory consumption or crash) via unspecified vectors related to NULL pointer dereferences, division-by-zero, and other errors.

Record
GHSA-ccpm-4wxg-wxgf
Updated
2026-11-02
OSVRHSA-2013:18507.5

Red Hat Security Advisory: openjpeg security update

Record
RHSA-2013:1850
CVSS 3.0
7.5 HighCVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-13
OSVMGASA-2014-0005No score

Updated openjpeg package fixes security vulnerabilities

Multiple heap-based buffer overflow flaws were found in OpenJPEG. An attacker could create a specially crafted OpenJPEG image that, when opened, could cause an application using openjpeg to crash or, possibly, execute arbitrary code with the privileges of the user running the application (CVE-2013-6045).

Multiple denial of service flaws were found in OpenJPEG. An attacker could create a specially crafted OpenJPEG image that, when opened, could cause an application using openjpeg to crash (CVE-2013-1447, CVE-2013-6052, CVE-2013-6053, CVE-2013-6887).

Record
MGASA-2014-0005
Updated
2026-11-02
OSVopenSUSE-SU-2024:10227-1No score

libopenjpeg1-1.5.2-4.7 on GA media

These are all security issues fixed in the libopenjpeg1-1.5.2-4.7 package on the GA media of openSUSE Tumbleweed.

Record
openSUSE-SU-2024:10227-1
Updated
2026-11-02
OSVUBUNTU-CVE-2013-1447No score

OpenJPEG 1.3 and earlier allows remote attackers to cause a denial of service (memory consumption or crash) via unspecified vectors related to NULL pointer dereferences, division-by-zero, and other errors.

Record
UBUNTU-CVE-2013-1447
Updated
2026-11-02

History

History
RecordedChangedSources
affected, facts
affected
aliasesEUVD
first indexedCVE List, GitHub Advisories, NVD, OSV

Dates are when Every CVE recorded each change. Upstream dates may differ.

References

Show 34 moreShow less
PagesAll vulnerabilitiesBrowseDocsSourcesGuideGet API key
MoveEnter Open