What’s Vulnerable › Vulnerabilities

CVE-2013-1439

• Severity: medium (CVSS 4.3 v2.0)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 2.1% probability of exploitation in the next 30 days
• Public exploit or detection template: yes
• Published: 2013-09-16 · updated 2026-06-16

Description

The "faster LJPEG decoder" in libraw 0.13.x, 0.14.x, and 0.15.x before 0.15.4 allows context-dependent attackers to cause a denial of service (NULL pointer dereference) via a crafted photo file.

Affected products

• LibRaw: 0.13.0, 0.13.1, 0.13.2, 0.13.3, 0.13.4, 0.13.5 (+15)

References

• http://www.debian.org/security/2013/dsa-2748
• http://www.openwall.com/lists/oss-security/2013/08/29/3
• https://github.com/LibRaw/LibRaw/commit/11909cc59e712e09b508dda729b99aeaac2b29ad
• http://www.debian.org/security/2013/dsa-2748
• http://www.openwall.com/lists/oss-security/2013/08/29/3
• https://github.com/LibRaw/LibRaw/commit/11909cc59e712e09b508dda729b99aeaac2b29ad

Get alerted when CVE-2013-1439 or the next vulnerability affects your stack