CVE-2013-6053: Input Validation
OpenJPEG 1.5.1 allows remote attackers to obtain sensitive information via unspecified vectors that trigger a heap-based out-of-bounds read.
Other sources
Raphael Geissert discovered out-of-bounds memory read flaws in OpenJPEG. If a specially-crafted image were opened by an application linked against OpenJPEG, it could cause the application to crash or lead to information leaks.
These issues only affected the version of OpenJPEG as shipped in Fedora (version 1.5.1)
— Red Hat
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2013-6053?
CVE-2013-6053 is classified as a medium severity vulnerability due to its potential for information disclosure.
How do I fix CVE-2013-6053?
To fix CVE-2013-6053, upgrade OpenJPEG to version 1.5.2 or later.
What types of applications are affected by CVE-2013-6053?
Applications that utilize OpenJPEG version 1.5.1 for processing images are affected by CVE-2013-6053.
What impact does CVE-2013-6053 have on users?
CVE-2013-6053 can allow remote attackers to obtain sensitive information from applications using the vulnerable OpenJPEG version.
Is there a known exploit for CVE-2013-6053?
As of now, there are no publicly known exploits specifically targeting CVE-2013-6053.