CVE-2013-6630

The get_dht function in jdmarker.c in libjpeg-turbo through 1.3.0, as used in Google Chrome before 31.0.1650.48 and other products, does not set all elements…

published November 15, 2013

CVSS
—
EPSS
2%
Percentile
81.8
In the wild
Unconfirmed
What it is

The get_dht function in jdmarker.c in libjpeg-turbo through 1.3.0, as used in Google Chrome before 31.0.1650.48 and other products, does not set all elements of a certain Huffman value array during the reading of segments that follow Define Huffman Table (DHT) JPEG markers, which allows remote attackers to obtain sensitive information from uninitialized memory locations via a crafted JPEG image.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.02131 · 81.8th percentile
Published
2013-11-15T20:00Z
EPSS history
Timeline
  • 15 NOV 20:00Z
    The get_dht function in jdmarker.c in libjpeg-turbo through 1.3.0, as used in Google Chrome before 31.0.1650.48 and other products, does not set all elements…
    cvelistv5