CVE-2023-39328

MEDIUM 5.5CVE-2023-39328 · Published 09/07/2024 · updated 26/06/2026

In short

CVE-2023-39328 is a MEDIUM (CVSS 5.5) vulnerability affecting openjpeg (uclouvain).
Chance of exploitation in the next 30 days (EPSS): 0.24%, higher than 15.5% of all vulnerabilities.
No patched version is listed yet: follow the vendor's advisory in References.

Package	Affected versions	Patched versions
openjpeg uclouvain	`= 2.0= 2.5.0`	No fix yet

Description

A vulnerability was found in OpenJPEG similar to CVE-2019-6988. This flaw allows an attacker to bypass existing protections and cause an application crash through a maliciously crafted file.

References

access.redhat.com/security/cve/CVE-2023-39328 · Third Party Advisory
bugzilla.redhat.com/show_bug.cgi · Issue Tracking
uclouvain/openjpeg
uclouvain/openjpeg#1470
uclouvain/openjpeg#1471

More vulnerabilities in openjpeg

See all →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free

Package

Affected versions

Patched versions

openjpeg

uclouvain

= 2.0= 2.5.0

No fix yet

More vulnerabilities in openjpeg

See all →