OpenJPEG 1.3 and earlier allows remote attackers to obtain sensitive information via unspecified vectors that trigger a heap-based out-of-bounds read.
https://euvd.enisa.europa.eu/vulnerability/EUVD-2013-5881
http://www.debian.org/security/2013/dsa-2808
http://seclists.org/oss-sec/2013/q4/412