cbcvebase.
CVE-2023-39329
published 2024-07-13

CVE-2023-39329: A flaw was found in OpenJPEG. A resource exhaustion can occur in the opj_t1_decode_cblks function in tcd.c through a crafted image file, causing a denial of…

medium6.5CVSS 3.1
AVNACLPRNUIRSUCNINAH
A flaw was found in OpenJPEG. A resource exhaustion can occur in the opj_t1_decode_cblks function in tcd.c through a crafted image file, causing a denial of service.

Affected

3 ranges
VendorProductVersion rangeFixed in
debianopenjpeg2
uclouvainopenjpeg
uclouvainopenjpeg

CVSS provenance

nvdv3.16.5MEDIUMCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
osv6.5MEDIUM