PT-2024-12804 · Openjpeg+1 · Openjpeg+1

Pedro Sampaio · Published 2024-07-05 · Updated 2026-03-09 · CVE-2023-39329

Positive Technologies (AI Summary)

CVSS v3.1

6.5

Medium

Base vector

AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions OpenJPEG (affected versions not specified)

Description A flaw in OpenJPEG can cause a resource exhaustion in the opj t1 decode cblks function in tcd.c through a crafted image file, leading to a denial of service.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

DoS

Resource Exhaustion

Weakness Enumeration

CWE-400

Related Identifiers

AZL-43495

AZL-44217

CVE-2023-39329

ECHO-91BF-3D3C-AEE7

Affected Products

Debian

Openjpeg

References · 19

• https://osv.dev/vulnerability/BELL-CVE-2023-39329 · Vendor Advisory
• https://security-tracker.debian.org/tracker/CVE-2023-39329 · Vendor Advisory
• https://access.redhat.com/errata/RHSA-2026:4128 · Vendor Advisory
• https://osv.dev/vulnerability/AZL-43495 · Vendor Advisory
• https://osv.dev/vulnerability/DEBIAN-CVE-2023-39329 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2023-39329 · Security Note
• https://osv.dev/vulnerability/CVE-2023-39329 · Vendor Advisory
• https://osv.dev/vulnerability/UBUNTU-CVE-2023-39329 · Vendor Advisory
• https://osv.dev/vulnerability/AZL-44217 · Vendor Advisory
• https://ubuntu.com/security/CVE-2023-39329 · Vendor Advisory
• https://cve.org/CVERecord?id=CVE-2023-39329 · Security Note
• https://t.me/cvenotify/86212 · Telegram Post
• https://t.me/cveNotify/154857 · Telegram Post
• https://access.redhat.com/security/cve/CVE-2023-39329 · Note
• https://t.me/cveNotify/131431 · Telegram Post