Not a U.S. government website. NDD is an independent vulnerability database by Volerion and is not affiliated with or endorsed by NIST or NVD.

CVE-2013-6630 Details

Description

The get_dht function in jdmarker.c in libjpeg-turbo through 1.3.0, as used in Google Chrome before 31.0.1650.48 and other products, does not set all elements of a certain Huffman value array during the reading of segments that follow Define Huffman Table (DHT) JPEG markers, which allows remote attackers to obtain sensitive information from uninitialized memory locations via a crafted JPEG image.

Metrics

CVSS 3.x Severity and Vector Strings:

No CVSS 3.x data is available for this CVE.

References to Advisories, Solutions, and Tools

By selecting these links, you will be leaving this site. These are references gathered from the official CVE record and are not endorsed by Volerion.

URL	Source(s)	Tag(s)
http://advisories.mageia.org/MGASA-2013-0333.html	CVE
http://archives.neohapsis.com/archives/fulldisclosure/2013-11/0080.html	CVE
http://git.chromium.org/gitweb/?p=chromium/deps/libjpeg_turbo.git%3Ba=commit%3Bh=32cab49bd4cb1ce069a435fd75f9439c34ddc6f8	CVE
http://googlechromereleases.blogspot.com/2013/11/stable-channel-update.html	CVE	Vendor Advisory
http://lists.fedoraproject.org/pipermail/package-announce/2013-December/123437.html	CVE
http://lists.fedoraproject.org/pipermail/package-announce/2013-December/124108.html	CVE
http://lists.fedoraproject.org/pipermail/package-announce/2013-December/124257.html	CVE
http://lists.fedoraproject.org/pipermail/package-announce/2014-January/125470.html	CVE
http://lists.opensuse.org/opensuse-security-announce/2013-11/msg00025.html	CVE
http://lists.opensuse.org/opensuse-security-announce/2013-11/msg00026.html	CVE
http://lists.opensuse.org/opensuse-security-announce/2013-12/msg00002.html	CVE
http://lists.opensuse.org/opensuse-updates/2013-12/msg00085.html	CVE
http://lists.opensuse.org/opensuse-updates/2013-12/msg00086.html	CVE
http://lists.opensuse.org/opensuse-updates/2013-12/msg00087.html	CVE
http://lists.opensuse.org/opensuse-updates/2013-12/msg00119.html	CVE
http://lists.opensuse.org/opensuse-updates/2013-12/msg00120.html	CVE
http://lists.opensuse.org/opensuse-updates/2013-12/msg00121.html	CVE
http://lists.opensuse.org/opensuse-updates/2014-01/msg00002.html	CVE
http://lists.opensuse.org/opensuse-updates/2014-01/msg00042.html	CVE
http://rhn.redhat.com/errata/RHSA-2013-1803.html	CVE
https://bugzilla.mozilla.org/show_bug.cgi?id=891693	CVE
https://code.google.com/p/chromium/issues/detail?id=299835	CVE
http://secunia.com/advisories/56175	CVE
https://security.gentoo.org/glsa/201606-03	CVE
http://www.debian.org/security/2013/dsa-2799	CVE
http://www.mandriva.com/security/advisories?name=MDVSA-2013:273	CVE
http://www.mozilla.org/security/announce/2013/mfsa2013-116.html	CVE
http://www.oracle.com/technetwork/topics/security/bulletinapr2016-2952098.html	CVE
http://www.securitytracker.com/id/1029470	CVE
http://www.securitytracker.com/id/1029476	CVE
http://www.ubuntu.com/usn/USN-2052-1	CVE
http://www.ubuntu.com/usn/USN-2053-1	CVE
http://www.ubuntu.com/usn/USN-2060-1	CVE
http://advisories.mageia.org/MGASA-2013-0333.html	[email protected]
http://archives.neohapsis.com/archives/fulldisclosure/2013-11/0080.html	[email protected]
http://git.chromium.org/gitweb/?p=chromium/deps/libjpeg_turbo.git%3Ba=commit%3Bh=32cab49bd4cb1ce069a435fd75f9439c34ddc6f8	[email protected]
http://googlechromereleases.blogspot.com/2013/11/stable-channel-update.html	[email protected]	Vendor Advisory
http://lists.fedoraproject.org/pipermail/package-announce/2013-December/123437.html	[email protected]
http://lists.fedoraproject.org/pipermail/package-announce/2013-December/124108.html	[email protected]
http://lists.fedoraproject.org/pipermail/package-announce/2013-December/124257.html	[email protected]
http://lists.fedoraproject.org/pipermail/package-announce/2014-January/125470.html	[email protected]
http://lists.opensuse.org/opensuse-security-announce/2013-11/msg00025.html	[email protected]
http://lists.opensuse.org/opensuse-security-announce/2013-11/msg00026.html	[email protected]
http://lists.opensuse.org/opensuse-security-announce/2013-12/msg00002.html	[email protected]
http://lists.opensuse.org/opensuse-updates/2013-12/msg00085.html	[email protected]
http://lists.opensuse.org/opensuse-updates/2013-12/msg00086.html	[email protected]
http://lists.opensuse.org/opensuse-updates/2013-12/msg00087.html	[email protected]
http://lists.opensuse.org/opensuse-updates/2013-12/msg00119.html	[email protected]
http://lists.opensuse.org/opensuse-updates/2013-12/msg00120.html	[email protected]
http://lists.opensuse.org/opensuse-updates/2013-12/msg00121.html	[email protected]
http://lists.opensuse.org/opensuse-updates/2014-01/msg00002.html	[email protected]
http://lists.opensuse.org/opensuse-updates/2014-01/msg00042.html	[email protected]
http://rhn.redhat.com/errata/RHSA-2013-1803.html	[email protected]
https://bugzilla.mozilla.org/show_bug.cgi?id=891693	[email protected]
https://code.google.com/p/chromium/issues/detail?id=299835	[email protected]
http://secunia.com/advisories/56175	[email protected]
https://security.gentoo.org/glsa/201606-03	[email protected]
http://www.debian.org/security/2013/dsa-2799	[email protected]
http://www.mandriva.com/security/advisories?name=MDVSA-2013:273	[email protected]
http://www.mozilla.org/security/announce/2013/mfsa2013-116.html	[email protected]
http://www.oracle.com/technetwork/topics/security/bulletinapr2016-2952098.html	[email protected]
http://www.securitytracker.com/id/1029470	[email protected]
http://www.securitytracker.com/id/1029476	[email protected]
http://www.ubuntu.com/usn/USN-2052-1	[email protected]
http://www.ubuntu.com/usn/USN-2053-1	[email protected]
http://www.ubuntu.com/usn/USN-2060-1	[email protected]

see all 66 references

Weakness Enumeration

CWE-ID	CWE Name	Source
CWE-189	Numeric Errors	[email protected]

Affected Products

Product	Versions
google chrome	<= 31.0.1650.47 31.0.1650.0 31.0.1650.2 31.0.1650.3 31.0.1650.4
CPE cpe:2.3:a:google:chrome:::::::: cpe:2.3:a:google:chrome:31.0.1650.0:::::::* cpe:2.3:a:google:chrome:31.0.1650.2:::::::* cpe:2.3:a:google:chrome:31.0.1650.3:::::::* cpe:2.3:a:google:chrome:31.0.1650.4:::::::* cpe:2.3:a:google:chrome:31.0.1650.5:::::::* cpe:2.3:a:google:chrome:31.0.1650.6:::::::* cpe:2.3:a:google:chrome:31.0.1650.7:::::::* cpe:2.3:a:google:chrome:31.0.1650.8:::::::* cpe:2.3:a:google:chrome:31.0.1650.9:::::::* cpe:2.3:a:google:chrome:31.0.1650.10:::::::* cpe:2.3:a:google:chrome:31.0.1650.11:::::::* cpe:2.3:a:google:chrome:31.0.1650.12:::::::* cpe:2.3:a:google:chrome:31.0.1650.13:::::::* cpe:2.3:a:google:chrome:31.0.1650.14:::::::* cpe:2.3:a:google:chrome:31.0.1650.15:::::::* cpe:2.3:a:google:chrome:31.0.1650.16:::::::* cpe:2.3:a:google:chrome:31.0.1650.17:::::::* cpe:2.3:a:google:chrome:31.0.1650.18:::::::* cpe:2.3:a:google:chrome:31.0.1650.19:::::::* cpe:2.3:a:google:chrome:31.0.1650.20:::::::* cpe:2.3:a:google:chrome:31.0.1650.22:::::::* cpe:2.3:a:google:chrome:31.0.1650.23:::::::* cpe:2.3:a:google:chrome:31.0.1650.25:::::::* cpe:2.3:a:google:chrome:31.0.1650.26:::::::* cpe:2.3:a:google:chrome:31.0.1650.27:::::::* cpe:2.3:a:google:chrome:31.0.1650.28:::::::* cpe:2.3:a:google:chrome:31.0.1650.29:::::::* cpe:2.3:a:google:chrome:31.0.1650.30:::::::* cpe:2.3:a:google:chrome:31.0.1650.31:::::::* cpe:2.3:a:google:chrome:31.0.1650.32:::::::* cpe:2.3:a:google:chrome:31.0.1650.33:::::::* cpe:2.3:a:google:chrome:31.0.1650.34:::::::* cpe:2.3:a:google:chrome:31.0.1650.35:::::::* cpe:2.3:a:google:chrome:31.0.1650.36:::::::* cpe:2.3:a:google:chrome:31.0.1650.37:::::::* cpe:2.3:a:google:chrome:31.0.1650.38:::::::* cpe:2.3:a:google:chrome:31.0.1650.39:::::::* cpe:2.3:a:google:chrome:31.0.1650.41:::::::* cpe:2.3:a:google:chrome:31.0.1650.42:::::::* cpe:2.3:a:google:chrome:31.0.1650.43:::::::* cpe:2.3:a:google:chrome:31.0.1650.44:::::::* cpe:2.3:a:google:chrome:31.0.1650.45:::::::* cpe:2.3:a:google:chrome:31.0.1650.46:::::::* Remediation No remediation found in references.

Product

Versions

google chrome

<= 31.0.1650.47

31.0.1650.0

31.0.1650.2

31.0.1650.3

31.0.1650.4

CPE

cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*
cpe:2.3:a:google:chrome:31.0.1650.0:*:*:*:*:*:*:*
cpe:2.3:a:google:chrome:31.0.1650.2:*:*:*:*:*:*:*
cpe:2.3:a:google:chrome:31.0.1650.3:*:*:*:*:*:*:*
cpe:2.3:a:google:chrome:31.0.1650.4:*:*:*:*:*:*:*
cpe:2.3:a:google:chrome:31.0.1650.5:*:*:*:*:*:*:*
cpe:2.3:a:google:chrome:31.0.1650.6:*:*:*:*:*:*:*
cpe:2.3:a:google:chrome:31.0.1650.7:*:*:*:*:*:*:*
cpe:2.3:a:google:chrome:31.0.1650.8:*:*:*:*:*:*:*
cpe:2.3:a:google:chrome:31.0.1650.9:*:*:*:*:*:*:*
cpe:2.3:a:google:chrome:31.0.1650.10:*:*:*:*:*:*:*
cpe:2.3:a:google:chrome:31.0.1650.11:*:*:*:*:*:*:*
cpe:2.3:a:google:chrome:31.0.1650.12:*:*:*:*:*:*:*
cpe:2.3:a:google:chrome:31.0.1650.13:*:*:*:*:*:*:*
cpe:2.3:a:google:chrome:31.0.1650.14:*:*:*:*:*:*:*
cpe:2.3:a:google:chrome:31.0.1650.15:*:*:*:*:*:*:*
cpe:2.3:a:google:chrome:31.0.1650.16:*:*:*:*:*:*:*
cpe:2.3:a:google:chrome:31.0.1650.17:*:*:*:*:*:*:*
cpe:2.3:a:google:chrome:31.0.1650.18:*:*:*:*:*:*:*
cpe:2.3:a:google:chrome:31.0.1650.19:*:*:*:*:*:*:*
cpe:2.3:a:google:chrome:31.0.1650.20:*:*:*:*:*:*:*
cpe:2.3:a:google:chrome:31.0.1650.22:*:*:*:*:*:*:*
cpe:2.3:a:google:chrome:31.0.1650.23:*:*:*:*:*:*:*
cpe:2.3:a:google:chrome:31.0.1650.25:*:*:*:*:*:*:*
cpe:2.3:a:google:chrome:31.0.1650.26:*:*:*:*:*:*:*
cpe:2.3:a:google:chrome:31.0.1650.27:*:*:*:*:*:*:*
cpe:2.3:a:google:chrome:31.0.1650.28:*:*:*:*:*:*:*
cpe:2.3:a:google:chrome:31.0.1650.29:*:*:*:*:*:*:*
cpe:2.3:a:google:chrome:31.0.1650.30:*:*:*:*:*:*:*
cpe:2.3:a:google:chrome:31.0.1650.31:*:*:*:*:*:*:*
cpe:2.3:a:google:chrome:31.0.1650.32:*:*:*:*:*:*:*
cpe:2.3:a:google:chrome:31.0.1650.33:*:*:*:*:*:*:*
cpe:2.3:a:google:chrome:31.0.1650.34:*:*:*:*:*:*:*
cpe:2.3:a:google:chrome:31.0.1650.35:*:*:*:*:*:*:*
cpe:2.3:a:google:chrome:31.0.1650.36:*:*:*:*:*:*:*
cpe:2.3:a:google:chrome:31.0.1650.37:*:*:*:*:*:*:*
cpe:2.3:a:google:chrome:31.0.1650.38:*:*:*:*:*:*:*
cpe:2.3:a:google:chrome:31.0.1650.39:*:*:*:*:*:*:*
cpe:2.3:a:google:chrome:31.0.1650.41:*:*:*:*:*:*:*
cpe:2.3:a:google:chrome:31.0.1650.42:*:*:*:*:*:*:*
cpe:2.3:a:google:chrome:31.0.1650.43:*:*:*:*:*:*:*
cpe:2.3:a:google:chrome:31.0.1650.44:*:*:*:*:*:*:*
cpe:2.3:a:google:chrome:31.0.1650.45:*:*:*:*:*:*:*
cpe:2.3:a:google:chrome:31.0.1650.46:*:*:*:*:*:*:*

Remediation

No remediation found in references.

Change History

9 change records found show changes

Date	Action	Recorded By
Jun 17, 2026	CVE Modified	[email protected]
Apr 29, 2026	Status Change	[email protected]
Nov 21, 2024	CVE Modified	CVE
May 14, 2024	CVE Modified	[email protected]
Nov 7, 2023	CVE Modified	[email protected]
Oct 4, 2016	CVE Modified	[email protected]
Jun 11, 2016	CVE Modified	[email protected]
May 20, 2015	CVE Modified	[email protected]
Nov 19, 2013	Initial Analysis	[email protected]