CVE-2013-6630: The get_dht function in jdmarker.c in libjpeg-turbo through 1.3.0, as used in Google Chrome before 31.0.165...

Security readout for executives and security teams

CVE-2013-6630 is a memory disclosure flaw in libjpeg-turbo’s JPEG Huffman table parsing. A malicious JPEG could make affected software expose data from uninitialized memory. The bundle names libjpeg-turbo through 1.3.0 and Google Chrome before 31.0.1650.48, with several Linux and browser vendor advisories. Exposure is most likely in browsers, image-processing services, desktop applications, or server packages that embedded or shipped vulnerable libjpeg-turbo versions around 2013. Current supported platforms are likely patched, but legacy systems, bundled libraries, appliances, and static builds should be checked. Moderate priority for modern environments, higher for legacy image-processing systems. The impact is sensitive memory disclosure through malicious images, and the available evidence points to vendor patching rather than ongoing exploitation. Mitigation focus: Upgrade affected vendor packages to fixed versions from the relevant advisory.; Ensure Chrome is not older than 31.0.1650.48 where applicable.; Replace bundled libjpeg-turbo through 1.3.0 with a vendor-patched build..

Prepared

Jun 14, 2026, 15:13 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.