CVE-2013-6630: Google Chrome

Medium severity, CVSS 5.0. EPSS: 2.1% chance of exploitation in the next 30 days.

The get_dht function in jdmarker.c in libjpeg-turbo through 1.3.0, as used in Google Chrome before 31.0.1650.48 and other products, does not set all elements of a certain Huffman value array during the reading of segments that follow Define Huffman Table (DHT) JPEG markers, which allows remote attackers to obtain sensitive information from uninitialized memory locations via a crafted JPEG image.

Affected products

• Google Chrome: up to and including 31.0.1650.47; version 31.0.1650.0 only; version 31.0.1650.2 only; version 31.0.1650.3 only; version 31.0.1650.4 only; version 31.0.1650.5 only; …

Published 2013-11-19. Last modified 2026-06-17.