PT-2024-12803 · Openjpeg+6 · Openjpeg+6

Pedro Sampaio · Published 2023-07-16 · Updated 2026-05-26 · CVE-2023-39327

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Medium

Base vector

AV:N/AC:L/Au:N/C:N/I:N/A:P

Name of the Vulnerable Software and Affected Versions OpenJPEG (affected versions not specified)

Description A flaw was found in OpenJPEG where maliciously constructed pictures can cause the program to enter a large loop and continuously print warning messages on the terminal. This issue might cause denial of service.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

DoS

Resource Exhaustion

Weakness Enumeration

CWE-400

Related Identifiers

AZL-73323

AZL-73362

BDU:2025-12484

CVE-2023-39327

DSA-5851-1

ECHO-922C-69F1-6B97

JLSEC-2026-548

MGASA-2024-0323

OPENSUSE-SU-2026:10095-1

OPENSUSE-SU-2026:20203-1

SUSE-SU-2025:3946-1

SUSE-SU-2025_3946-1

SUSE-SU-2026:0320-1

SUSE-SU-2026:0330-1

SUSE-SU-2026:20422-1

USN-7037-1

USN-7623-1

Affected Products

Astra Linux

Debian

Linuxmint

Openjpeg

Red Os

Suse

Ubuntu

References · 64

• https://osv.dev/vulnerability/SUSE-SU-2026:0320-1 · Vendor Advisory
• https://ubuntu.com/security/CVE-2025-27836 · Vendor Advisory
• https://ubuntu.com/security/CVE-2025-48708 · Vendor Advisory
• https://security-tracker.debian.org/tracker/CVE-2023-39327 · Vendor Advisory
• https://osv.dev/vulnerability/BELL-CVE-2023-39327 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2023-39327 · Security Note
• https://ubuntu.com/security/CVE-2025-27832 · Vendor Advisory
• https://access.redhat.com/security/cve/CVE-2023-39327 · Vendor Advisory
• https://osv.dev/vulnerability/DSA-5851-1 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2023-39327 · Vendor Advisory
• https://bdu.fstec.ru/vul/2025-12484 · Security Note
• https://osv.dev/vulnerability/SUSE-SU-2026:0330-1 · Vendor Advisory
• https://access.redhat.com/errata/RHSA-2026:4128 · Vendor Advisory
• https://ubuntu.com/security/CVE-2023-39327 · Vendor Advisory
• https://wiki.astralinux.ru/astra-linux-se17-bulletin-2025-0923SE17 · Vendor Advisory