What’s Vulnerable › Vulnerabilities

CVE-2023-39328: Openjpeg: denail of service via crafted image file

• Severity: medium (CVSS 5.5 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.2% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2024-07-09 · updated 2026-06-26
• Weakness: CWE-400

Description

A vulnerability was found in OpenJPEG similar to CVE-2019-6988. This flaw allows an attacker to bypass existing protections and cause an application crash through a maliciously crafted file.

Affected products

• uclouvain openjpeg: 2.0, 2.5.0

References

• https://access.redhat.com/security/cve/CVE-2023-39328
• https://bugzilla.redhat.com/show_bug.cgi?id=2219236
• https://github.com/uclouvain/openjpeg/issues/1476
• https://github.com/uclouvain/openjpeg/pull/1470
• https://github.com/uclouvain/openjpeg/pull/1471
• https://access.redhat.com/security/cve/CVE-2023-39328
• https://bugzilla.redhat.com/show_bug.cgi?id=2219236

Get alerted when CVE-2023-39328 or the next vulnerability affects your stack