Every CVESearch/Get API key

CVE-2013-6054

Heap-based buffer overflow in OpenJPEG 1.3 has unspecified impact and remote vectors, a different...

7.5 High

CVE-2013-6054 is a high vulnerability (CVSS 7.5) in Uclouvain Openjpeg, published December 3, 2013. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 2.17%, the 82nd percentile. No source names a fixed version.

What does this mean?
Severity
7.5 HighCVSS 2.0, NVD
Exploit chance
2.17%EPSS, 82nd percentile
Exploitation
None knownNot on CISA’s or ENISA’s lists
Fixed in
No fix listedNo source names one

Description

Heap-based buffer overflow in OpenJPEG 1.3 has unspecified impact and remote vectors, a different vulnerability than CVE-2013-6045.

Exploit likelihood

2.17%Up 1.1 points since Feb 4, 2022
90%50%10%1%

Affected products

Affected packages

Affected packages
PackageAffectedFixed
openjpeg
Debian:6.0
From an advisory covering 4 CVEs
before 1.3+dfsg-4+squeeze2, plus listed versions
1.3+dfsg-41.3+dfsg-4+squeeze1
1.3+dfsg-4+squeeze2
openjpeg
Debian:7
From an advisory covering 4 CVEs
before 1.3+dfsg-4.7, plus listed versions
1.3+dfsg-4.6
1.3+dfsg-4.7
openjpeg
Red Hat:enterprise_linux:6::client
From an advisory covering 4 CVEs
before 0:1.3-10.el6_5
0:1.3-10.el6_5
openjpeg-debuginfo
Red Hat:enterprise_linux:6::client
From an advisory covering 4 CVEs
before 0:1.3-10.el6_5
0:1.3-10.el6_5
openjpeg-libs
Red Hat:enterprise_linux:6::client
From an advisory covering 4 CVEs
before 0:1.3-10.el6_5
0:1.3-10.el6_5
openjpeg-devel
Red Hat:enterprise_linux:6::client
From an advisory covering 4 CVEs
before 0:1.3-10.el6_5
0:1.3-10.el6_5
openjpeg
Red Hat:enterprise_linux:6::computenode
From an advisory covering 4 CVEs
before 0:1.3-10.el6_5
0:1.3-10.el6_5
openjpeg-debuginfo
Red Hat:enterprise_linux:6::computenode
From an advisory covering 4 CVEs
before 0:1.3-10.el6_5
0:1.3-10.el6_5
openjpeg-libs
Red Hat:enterprise_linux:6::computenode
From an advisory covering 4 CVEs
before 0:1.3-10.el6_5
0:1.3-10.el6_5
openjpeg-devel
Red Hat:enterprise_linux:6::computenode
From an advisory covering 4 CVEs
before 0:1.3-10.el6_5
0:1.3-10.el6_5
Show 8 moreShow less
Affected packages
PackageAffectedFixed
openjpeg
Red Hat:enterprise_linux:6::server
From an advisory covering 4 CVEs
before 0:1.3-10.el6_5
0:1.3-10.el6_5
openjpeg-debuginfo
Red Hat:enterprise_linux:6::server
From an advisory covering 4 CVEs
before 0:1.3-10.el6_5
0:1.3-10.el6_5
openjpeg-libs
Red Hat:enterprise_linux:6::server
From an advisory covering 4 CVEs
before 0:1.3-10.el6_5
0:1.3-10.el6_5
openjpeg-devel
Red Hat:enterprise_linux:6::server
From an advisory covering 4 CVEs
before 0:1.3-10.el6_5
0:1.3-10.el6_5
openjpeg
Red Hat:enterprise_linux:6::workstation
From an advisory covering 4 CVEs
before 0:1.3-10.el6_5
0:1.3-10.el6_5
openjpeg-debuginfo
Red Hat:enterprise_linux:6::workstation
From an advisory covering 4 CVEs
before 0:1.3-10.el6_5
0:1.3-10.el6_5
openjpeg-libs
Red Hat:enterprise_linux:6::workstation
From an advisory covering 4 CVEs
before 0:1.3-10.el6_5
0:1.3-10.el6_5
openjpeg-devel
Red Hat:enterprise_linux:6::workstation
From an advisory covering 4 CVEs
before 0:1.3-10.el6_5
0:1.3-10.el6_5

What each source reports

NVD Score used7.5

Heap-based buffer overflow in OpenJPEG 1.3 has unspecified impact and remote vectors, a different vulnerability than CVE-2013-6045.

Record
CVE-2013-6054
CVSS 2.0
7.5 HighAV:N/AC:L/Au:N/C:P/I:P/A:P
Weakness
CWE-119
Updated
2026-11-02
CVE ListNo score

Heap-based buffer overflow in OpenJPEG 1.3 has unspecified impact and remote vectors, a different vulnerability than CVE-2013-6045.

Record
CVE-2013-6054
Updated
2026-11-02
EUVDEUVD-2013-5883No score

Heap-based buffer overflow in OpenJPEG 1.3 has unspecified impact and remote vectors, a different vulnerability than CVE-2013-6045.

Record
EUVD-2013-5883
Updated
2026-11-03
GitHub AdvisoriesGHSA-qj5m-cr8m-jr8vNo score

Heap-based buffer overflow in OpenJPEG 1.3 has unspecified impact and remote vectors, a different...

Heap-based buffer overflow in OpenJPEG 1.3 has unspecified impact and remote vectors, a different vulnerability than CVE-2013-6045.

Record
GHSA-qj5m-cr8m-jr8v
Weakness
CWE-119
Updated
2026-11-02
OSVRHSA-2013:18507.5

Red Hat Security Advisory: openjpeg security update

Record
RHSA-2013:1850
CVSS 3.0
7.5 HighCVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-13
OSVopenSUSE-SU-2024:10227-1No score

libopenjpeg1-1.5.2-4.7 on GA media

These are all security issues fixed in the libopenjpeg1-1.5.2-4.7 package on the GA media of openSUSE Tumbleweed.

Record
openSUSE-SU-2024:10227-1
Updated
2026-11-02
OSVUBUNTU-CVE-2013-6054No score

Heap-based buffer overflow in OpenJPEG 1.3 has unspecified impact and remote vectors, a different vulnerability than CVE-2013-6045.

Record
UBUNTU-CVE-2013-6054
Updated
2026-11-02

History

History
RecordedChangedSources
affected, facts
affected
aliasesEUVD
first indexedCVE List, GitHub Advisories, NVD, OSV

Dates are when Every CVE recorded each change. Upstream dates may differ.

References

Show 32 moreShow less
PagesAll vulnerabilitiesBrowseDocsSourcesGuideGet API key
MoveEnter Open