CVE-2013-6629

CVE-2013-6629 describes an information disclosure vulnerability in the get_sos function of libjpeg 6b and libjpeg-turbo through 1.3.0, affecting products like Google Chrome, Ghostscript, and various Linux distributions. This flaw allows remote attackers to obtain sensitive information from uninitialized memory by crafting a malicious JPEG image that duplicates component data after Start Of Scan (SOS) markers. With a CVSS score of 5.0, this vulnerability is of medium severity, requiring no authentication and having a low attack complexity, potentially leading to information exposure. There is no evidence of active exploitation, no public exploit code (Metasploit, Nuclei, ExploitDB), and minimal community discussion or media coverage, indicating low current threat activity.