PT-2023-9547 · Openjpeg+2 · Openjpeg+2

Tej Rathi · Published 2023-06-29 · Updated 2026-05-26 · CVE-2023-39328

Positive Technologies (AI Summary)

CVSS v3.1

5.5

Medium

Base vector

AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions OpenJPEG (affected versions not specified)

Description A flaw in OpenJPEG allows an attacker to bypass existing protections and cause an application crash through a maliciously crafted file. The vulnerability is related to uncontrolled resource consumption, which can be exploited by an attacker to cause a denial of service using a specially crafted file.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

DoS

Resource Exhaustion

Weakness Enumeration

CWE-400

Related Identifiers

AZL-43657

AZL-44982

BDU:2024-08389

CVE-2023-39328

ECHO-A156-A63C-CBE1

JLSEC-2026-549

OESA-2024-1846

Affected Products

Debian

Openjpeg

Red Os

References · 30

• https://osv.dev/vulnerability/JLSEC-2026-549 · Vendor Advisory
• https://bdu.fstec.ru/vul/2024-08389 · Security Note
• https://osv.dev/vulnerability/ROOT-OS-DEBIAN-12-CVE-2023-39328 · Vendor Advisory
• https://cve.org/CVERecord?id=CVE-2023-39328 · Security Note
• https://osv.dev/vulnerability/BELL-CVE-2023-39328 · Vendor Advisory
• https://osv.dev/vulnerability/ROOT-OS-DEBIAN-13-CVE-2023-39328 · Vendor Advisory
• https://osv.dev/vulnerability/UBUNTU-CVE-2023-39328 · Vendor Advisory
• https://osv.dev/vulnerability/AZL-44982 · Vendor Advisory
• https://osv.dev/vulnerability/DEBIAN-CVE-2023-39328 · Vendor Advisory
• https://osv.dev/vulnerability/OESA-2024-1846 · Vendor Advisory
• https://osv.dev/vulnerability/ROOT-OS-DEBIAN-11-CVE-2023-39328 · Vendor Advisory
• https://osv.dev/vulnerability/AZL-43657 · Vendor Advisory
• https://ubuntu.com/security/CVE-2023-39328 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2023-39328 · Vendor Advisory
• https://security-tracker.debian.org/tracker/CVE-2023-39328 · Vendor Advisory