CVE-2013-4289

CVE-2013-4289 describes multiple integer overflows in the lib/openjp3d/jp3d.c component of OpenJPEG versions prior to 1.5.2. These overflows can lead to a heap-based buffer overflow, potentially allowing remote attackers to execute arbitrary code or cause a denial of service. With a CVSS score of 10.0 (AV:N/AC:L/Au:N/C:C/I:C/A:C), this vulnerability is considered critical, indicating it can be exploited remotely with low attack complexity and has complete impact on confidentiality, integrity, and availability. Despite its high severity, there is no evidence of active exploitation, publicly available exploit code (Metasploit, Nuclei, ExploitDB), or significant community discussion or media coverage.