CVE-2013-1439

Published: Sep 16, 2013Modified: Apr 29, 2026

4.3

Vector

AV:N/AC:M/Au:N/C:N/I:N/A:P

Exploitability: 8.6 / Impact: 2.9

Source: NVD

Description

The "faster LJPEG decoder" in libraw 0.13.x, 0.14.x, and 0.15.x before 0.15.4 allows context-dependent attackers to cause a denial of service (NULL pointer dereference) via a crafted photo file.

Affected (21)

Products: Libraw: Libraw

Libraw

1 product

Libraw

Configuration A

21 vulnerable

Vulnerable Software	Affected Versions
Libraw Libraw	Version 0.13.0
Libraw Libraw	Version 0.13.1
Libraw Libraw	Version 0.13.2
Libraw Libraw	Version 0.13.3
Libraw Libraw	Version 0.13.4
Libraw Libraw	Version 0.13.5
Libraw Libraw	Version 0.13.6
Libraw Libraw	Version 0.13.7
Libraw Libraw	Version 0.13.8
Libraw Libraw	Version 0.14.0
Libraw Libraw	Version 0.14.1
Libraw Libraw	Version 0.14.2
Libraw Libraw	Version 0.14.3
Libraw Libraw	Version 0.14.4
Libraw Libraw	Version 0.14.5
Libraw Libraw	Version 0.14.6
Libraw Libraw	Version 0.14.7
Libraw Libraw	Version 0.15.0
Libraw Libraw	Version 0.15.1
Libraw Libraw	Version 0.15.2
Libraw Libraw	Version 0.15.3