CVE-2023-39327

CWE-400 — Uncontrolled Resource Consumption9 documents7 sources
Severity
4.3MEDIUM
EPSS
0.0%
top 92.61%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
1
Uclouvain Openjpeg
Timeline
PublishedJul 13
Latest updateJul 8

Description

A flaw was found in OpenJPEG. Maliciously constructed pictures can cause the program to enter a large loop and continuously print warning messages on the terminal.

CVSS vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:LExploitability: 2.8 | Impact: 1.4

Affected Packages2 packages

▶NVDuclouvain/openjpeg2.0, 2.5.0+1
▶Ubuntughostscript< 9.55.0~dfsg1-0ubuntu5.12+4

🔴Vulnerability Details

4
OSV
ghostscript vulnerabilities↗2025-07-08
▶
GHSA
GHSA-f7p4-6cq7-whmw: A flaw was found in OpenJPEG↗2024-07-13
▶
OSV
CVE-2023-39327: A flaw was found in OpenJPEG↗2024-07-13
▶
CVEList
Openjpeg: malicious files can cause the program to enter a large loop↗2024-07-13
▶

📋Vendor Advisories

4
Ubuntu
Ghostscript vulnerabilities↗2025-07-08
▶
Ubuntu
OpenJPEG vulnerability↗2024-09-26
▶
Red Hat
openjpeg: Malicious files can cause the program to enter a large loop↗2024-07-04
▶
Debian
CVE-2023-39327: openjpeg2 - A flaw was found in OpenJPEG. Maliciously constructed pictures can cause the pro...↗2023
▶
CVE-2023-39327 (MEDIUM CVSS 4.3) | A flaw was found in OpenJPEG | cvebase.io