CVE-2013-4290: Uclouvain Openjpeg

High severity, CVSS 10.0. EPSS: 3% chance of exploitation in the next 30 days.

Stack-based buffer overflow in OpenJPEG before 1.5.2 allows remote attackers to have unspecified impact via unknown vectors to (1) lib/openjp3d/opj_jp3d_compress.c, (2) bin/jp3d/convert.c, or (3) lib/openjp3d/event.c.

Affected products

• Uclouvain Openjpeg: up to and including 1.5.1; version 1.3 only; version 1.4 only; version 1.5 only

Published 2014-04-18. Last modified 2026-06-16.