What is the CVSS score of CVE-2013-1424?

CVE-2013-1424 has a CVSS 3.1 base score of 5.6 (Medium). CVSS vector: CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L. EPSS exploitation probability: 0.1%.

Which versions of Ubuntu are affected by CVE-2013-1424?

Organizations using Buffer overflow vulnerability in matplotlib.This should be aware of moderate risk from CVE-2013-1424, a buffer overflow vulnerability rated CVSS 5.6.. A patch is available.

How to fix or mitigate CVE-2013-1424?

Within 30 days: Identify affected systems and apply vendor patches as part of regular patch cycle. Vendor patch is available.

Ubuntu CVE-2013-1424

EUVD-2013-1462 MEDIUM

Classic Buffer Overflow (CWE-120)

2025-06-26 security@debian.org

Buffer Overflow Debian Ubuntu Red Hat Matplotlib

5.6

CVSS 3.1 · NVD

Severity by source

NVD PRIMARY

5.6 MEDIUM

AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L

Ubuntu

MEDIUM

qualitative

Red Hat

5.6 MEDIUM

qualitative

Primary rating from NVD.

CVSS VectorNVD

Attack Vector

Network

Attack Complexity

High

Privileges Required

None

User Interaction

None

Scope

Unchanged

Confidentiality

Low

Integrity

Low

Availability

Low

Lifecycle Timeline

EUVD ID Assigned

Mar 15, 2026 - 23:54 euvd

EUVD-2013-1462

Analysis Generated

Mar 15, 2026 - 23:54 vuln.today

Patch released

Mar 15, 2026 - 23:54 nvd

Patch available

CVE Published

Jun 26, 2025 - 20:15 nvd

MEDIUM 5.6

DescriptionCVE.org

Buffer overflow vulnerability in matplotlib.This issue affects matplotlib: before upstream commit ba4016014cb4fb4927e36ce8ea429fed47dcb787.

Analysis

Buffer overflow vulnerability in matplotlib.This issue affects matplotlib: before upstream commit ba4016014cb4fb4927e36ce8ea429fed47dcb787.

Technical ContextAI

A buffer overflow occurs when data written to a buffer exceeds its allocated size, potentially overwriting adjacent memory and corrupting program state. This vulnerability is classified as Classic Buffer Overflow (CWE-120).

RemediationAI

A vendor patch is available — apply it immediately. Use memory-safe languages or bounds-checked functions. Enable ASLR, DEP/NX, and stack canaries. Apply vendor patches promptly.

Same weakness CWE-120 – Classic Buffer Overflow

View all

CVE-2017-7269 CRITICAL POC

9.8

CVE-2019-11043 CRITICAL POC

9.8

CVE-2016-10174 CRITICAL POC

9.8

CVE-2016-0099 HIGH POC

7.8

CVE-2016-6366 HIGH POC

8.8

CVE-2013-1331 HIGH

7.8

CVE-2013-0641 HIGH

7.8

CVE-2017-15222 CRITICAL POC

9.8

Same technique Buffer Overflow

View all

CVE-2017-7269 CRITICAL POC

9.8

CVE-2015-5119 CRITICAL POC

9.8

CVE-2015-3113 CRITICAL POC

9.8

CVE-2011-2462 CRITICAL POC

9.8

CVE-2020-0796 CRITICAL POC

10.0

CVE-2019-11043 CRITICAL POC

9.8

CVE-2009-0927 HIGH POC

8.8

CVE-2012-1889 HIGH POC

8.8

Vendor StatusVendor

Ubuntu

Priority: Medium

matplotlib

Release	Status	Version
artful	not-affected	-
bionic	not-affected	-
cosmic	not-affected	-
lucid	ignored	end of life
precise	ignored	end of life
trusty	released	1.3.1-1ubuntu5.1
upstream	released	1.4.2-3.1
utopic	ignored	end of life
vivid	ignored	end of life
wily	ignored	end of life
xenial	not-affected	1.5.1-1ubuntu1
yakkety	ignored	end of life
zesty	ignored	end of life

Debian

Bug #775691

matplotlib

Release	Status	Fixed Version	Urgency
bullseye	fixed	3.3.4-1	-
bookworm	fixed	3.6.3-1	-
trixie	fixed	3.10.1+dfsg1-4	-
forky, sid	fixed	3.10.7+dfsg1-2	-
(unstable)	fixed	1.4.2-3.1	low

CVE-2013-1424 vulnerability details – vuln.today

Back

Ubuntu CVE-2013-1424

Severity by source

CVSS VectorNVD

Lifecycle Timeline

DescriptionCVE.org

Analysis

Technical ContextAI

RemediationAI

Same weakness CWE-120 – Classic Buffer Overflow

Same technique Buffer Overflow

Vendor StatusVendor

Ubuntu

Debian

Share

External POC / Exploit Code