CVE-2013-1441: Exactcode Exactimage

Medium severity, CVSS 4.3. EPSS: 1.3% chance of exploitation in the next 30 days.

econvert in ExactImage 0.8.9 and earlier does not properly initialize the setjmp variable, which allows context-dependent users to cause a denial of service (crash) via a crafted image file.

Affected products

• Exactcode Exactimage: up to and including 0.8.9; version 0.0.1 only; version 0.0.2 only; version 0.0.3 only; version 0.0.4 only; version 0.0.5 only; …

Published 2013-09-16. Last modified 2026-06-16.