CVE-2023-39329

CWE-400 — Uncontrolled Resource Consumption6 documents6 sources
Severity
6.5MEDIUM
EPSS
0.1%
top 80.88%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
1
Uclouvain Openjpeg
Timeline
PublishedJul 13

Description

A flaw was found in OpenJPEG. A resource exhaustion can occur in the opj_t1_decode_cblks function in tcd.c through a crafted image file, causing a denial of service.

CVSS vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:HExploitability: 2.8 | Impact: 3.6

Affected Packages1 packages

▶NVDuclouvain/openjpeg2.0, 2.5.0+1

🔴Vulnerability Details

3
CVEList
Openjpeg: resource exhaustion will occur in the opj_t1_decode_cblks function in the tcd.c↗2024-07-13
▶
OSV
CVE-2023-39329: A flaw was found in OpenJPEG↗2024-07-13
▶
GHSA
GHSA-8g92-f59v-j999: A flaw was found in OpenJPEG↗2024-07-13
▶

📋Vendor Advisories

2
Red Hat
openjpeg: Resource exhaustion will occur in the opj_t1_decode_cblks function in the tcd.c↗2024-07-04
▶
Debian
CVE-2023-39329: openjpeg2 - A flaw was found in OpenJPEG. A resource exhaustion can occur in the opj_t1_deco...↗2023
▶
CVE-2023-39329 (MEDIUM CVSS 6.5) | A flaw was found in OpenJPEG | cvebase.io