CVE-2023-39327
Openjpeg: malicious files can cause the program to enter a large loop
A flaw was found in OpenJPEG. Maliciously constructed pictures can cause the program to enter a large loop and continuously print warning messages on the terminal.
Attack profile
How easy it is to exploit
- Attack vector
- Network
- Complexity
- Low
- Privileges needed
- None
- User interaction
- Required
What an attacker can affect
- Confidentiality
- None
- Integrity
- None
- Availability
- Low
Exploit likelihood
What each source reports
CVE List Score used
Openjpeg: malicious files can cause the program to enter a large loop
A flaw was found in OpenJPEG. Maliciously constructed pictures can cause the program to enter a large loop and continuously print warning messages on the terminal.
- Record
CVE-2023-39327- CVSS 3.1
- 4.3 Medium
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L - Weakness
- CWE-400
- Updated
- 2026-11-07
EUVDEUVD-2023-43058
A flaw was found in OpenJPEG. Maliciously constructed pictures can cause the program to enter a large loop and continuously print warning messages on the terminal.
- Record
EUVD-2023-43058- CVSS 3.1
- 4.3 Medium
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L - Updated
- 2026-11-07
GitHub AdvisoriesGHSA-f7p4-6cq7-whmw
A flaw was found in OpenJPEG. Maliciously constructed pictures can cause the program to enter a...
A flaw was found in OpenJPEG. Maliciously constructed pictures can cause the program to enter a large loop and continuously print warning messages on the terminal.
- Record
GHSA-f7p4-6cq7-whmw- CVSS 3.1
- 4.3 Medium
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L - Weakness
- CWE-400
- Updated
- 2026-11-02
NVD
A flaw was found in OpenJPEG. Maliciously constructed pictures can cause the program to enter a large loop and continuously print warning messages on the terminal.
- Record
CVE-2023-39327- CVSS 3.1
- 4.3 Medium
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L - Weakness
- CWE-400
- Updated
- 2026-11-07
OSVBELL-CVE-2023-39327
- Record
BELL-CVE-2023-39327- CVSS 3.1
- 4.3 Medium
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L - Updated
- 2026-11-02
OSV
Openjpeg: malicious files can cause the program to enter a large loop
A flaw was found in OpenJPEG. Maliciously constructed pictures can cause the program to enter a large loop and continuously print warning messages on the terminal.
- Record
CVE-2023-39327- CVSS 3.1
- 4.3 Medium
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L - Weakness
- CWE-400
- Updated
- 2026-11-02
Show 18 moreShow less
OSVDEBIAN-CVE-2023-39327
A flaw was found in OpenJPEG. Maliciously constructed pictures can cause the program to enter a large loop and continuously print warning messages on the terminal.
- Record
DEBIAN-CVE-2023-39327- CVSS 3.1
- 4.3 Medium
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L - Updated
- 2026-11-02
OSVJLSEC-2026-548
A flaw was found in OpenJPEG. Maliciously constructed pictures can cause the program to enter a large loop and continuously print warning messages on the terminal.
- Record
JLSEC-2026-548- CVSS 3.1
- 4.3 Medium
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L - Updated
- 2026-11-02
OSVROOT-OS-DEBIAN-11-CVE-2023-39327
CVE-2023-39327 in openjpeg2 - Patched by Root
Root has patched CVE-2023-39327 in the openjpeg2 package for Root:Debian:11. Multiple fixed versions available.
- Record
ROOT-OS-DEBIAN-11-CVE-2023-39327- CVSS 3.1
- 4.3 Medium
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L - Updated
- 2026-11-02
OSVROOT-OS-DEBIAN-13-CVE-2023-39327
CVE-2023-39327 in openjpeg2 - Patched by Root
Root has patched CVE-2023-39327 in the openjpeg2 package for Root:Debian:13. Multiple fixed versions available.
- Record
ROOT-OS-DEBIAN-13-CVE-2023-39327- CVSS 3.1
- 4.3 Medium
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L - Updated
- 2026-11-02
OSVUBUNTU-CVE-2023-39327
A flaw was found in OpenJPEG. Maliciously constructed pictures can cause the program to enter a large loop and continuously print warning messages on the terminal.
- Record
UBUNTU-CVE-2023-39327- CVSS 3.1
- 4.3 Medium
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L - Updated
- 2026-11-02
OSVAZL-73323 No score
CVE-2023-39327 affecting package openjpeg2 2.3.1-12
A flaw was found in OpenJPEG. Maliciously constructed pictures can cause the program to enter a large loop and continuously print warning messages on the terminal.
- Record
AZL-73323- Updated
- 2026-11-05
OSVAZL-73362 No score
CVE-2023-39327 affecting package openjpeg2 2.3.1-12
A flaw was found in OpenJPEG. Maliciously constructed pictures can cause the program to enter a large loop and continuously print warning messages on the terminal.
- Record
AZL-73362- Updated
- 2026-11-02
OSVCLSA-2026-1786708350 No score
openjpeg2: Fix of 2 CVEs
- CVE-2025-50952: fix NULL pointer dereference in opj_dwt_decode_tile()
- CVE-2023-39327: fix uncontrolled resource consumption when EPH markers are declared but missing
- Record
CLSA-2026-1786708350- Updated
- 2026-11-02
OSVCLSA-2026-1787149537 No score
openjpeg2: Fix of 2 CVEs
- CVE-2025-50952: fix NULL pointer dereference in opj_dwt_decode_tile()
- CVE-2023-39327: fix uncontrolled resource consumption when EPH markers are declared but missing
- Record
CLSA-2026-1787149537- Updated
- 2026-11-02
OSVMGASA-2024-0323 No score
Updated openjpeg2 packages fix security vulnerability
Maliciously constructed pictures can cause the program to enter a large loop and continuously print warning messages on the terminal. (CVE-2023-39327)
- Record
MGASA-2024-0323- Updated
- 2026-11-02
OSVopenSUSE-SU-2026:10095-1 No score
libopenjp2-7-2.5.4-2.1 on GA media
These are all security issues fixed in the libopenjp2-7-2.5.4-2.1 package on the GA media of openSUSE Tumbleweed.
- Record
openSUSE-SU-2026:10095-1- Updated
- 2026-11-02
OSVopenSUSE-SU-2026:20203-1 No score
Security update for openjpeg2
This update for openjpeg2 fixes the following issues:
- CVE-2023-39327: Fixed malicious files can cause a large loop that continuously prints warning messages on the terminal (bsc#1227412).
- Record
openSUSE-SU-2026:20203-1- Updated
- 2026-11-02
OSVSUSE-SU-2025:3946-1 No score
Security update for openjpeg
This update for openjpeg fixes the following issues:
- CVE-2023-39327: Fixed that malicious files can cause a large loop that continuously prints warning messages on the terminal (bsc#1227410).
Other bug fixes:
- Ensure no bundled libraries are used (bsc#1250467).
- Record
SUSE-SU-2025:3946-1- Updated
- 2026-11-02
OSVSUSE-SU-2026:0320-1 No score
Security update for openjpeg2
This update for openjpeg2 fixes the following issues:
- CVE-2023-39327: Fixed malicious files can cause a large loop that continuously prints warning messages on the terminal (bsc#1227412).
- Record
SUSE-SU-2026:0320-1- Updated
- 2026-11-02
OSVSUSE-SU-2026:0330-1 No score
Security update for openjpeg2
This update for openjpeg2 fixes the following issues:
- CVE-2023-39327: Fixed malicious files can cause a large loop that continuously prints warning messages on the terminal (bsc#1227412).
- Record
SUSE-SU-2026:0330-1- Updated
- 2026-11-02
OSVSUSE-SU-2026:20422-1 No score
Security update for openjpeg2
This update for openjpeg2 fixes the following issues:
- CVE-2023-39327: Fixed malicious files can cause a large loop that continuously prints warning messages on the terminal (bsc#1227412).
- Record
SUSE-SU-2026:20422-1- Updated
- 2026-11-02
OSVUSN-7037-1 No score
openjpeg2 vulnerability
It was discovered that OpenJPEG could enter a large loop and continuously print warning messages when given specially crafted input. An attacker could potentially use this issue to cause a denial of service.
- Record
USN-7037-1- Updated
- 2026-11-02
OSVUSN-7623-1 No score
ghostscript vulnerabilities
It was discovered that OpenJPEG, vendored in Ghostscript did not correctly handle large image files. If a user or system were tricked into opening a specially crafted file, an attacker could possibly use this issue to cause a denial of service. This issue only affected Ubuntu 16.04 LTS and Ubuntu 18.04 LTS. (CVE-2023-39327) Thomas Rinsma discovered that Ghostscript did not correctly handle printing certain variables. An attacker could possibly use this issue to leak sensitive information. This issue only affected Ubuntu 16.04 LTS and Ubuntu 18.04 LTS. (CVE-2024-29508) It was discovered that Ghostscript did not correctly handle loading certain libraries. An attacker could possibly use this issue to execute arbitrary code. This issue only affected Ubuntu 16.04 LTS. (CVE-2024-33871) It was discovered that Ghostscript did not correctly handle certain memory operations. An attacker could possibly use this issue to execute arbitrary code. This issue only affected Ubuntu 16.04 LTS and Ubuntu 18.04 LTS. (CVE-2024-56826, CVE-2024-56827, CVE-2025-27832, CVE-2025-27835, CVE-2025-27836) Vasileios Flengas discovered that Ghostscript did not correctly handle argument sanitization. An attacker could possibly use this issue to leak sensitive information. This issue only affected Ubuntu 20.04 LTS, Ubuntu 22.04 LTS, Ubuntu 24.04 LTS, Ubuntu 24.10 and Ubuntu 25.04. (CVE-2025-48708)
- Record
USN-7623-1- Updated
- 2026-11-02
Affected products
Affected packages
| Package | Affected | Fixed |
|---|---|---|
openjpeg2Azure Linux:3 |
through 2.3.1-12 | None known |
openjpeg2Azure Linux:2 |
through 2.3.1-12 | None known |
openjpegAlpaquita:23 |
2.5.0-r0 and later | None known |
openjpegAlpaquita:stream |
2.5.0-r0 and later | None known |
openjpeg2TuxCare:AlmaLinux:9.2 From an advisory covering 2 CVEs |
before 2.4.0-7.el9_2.tuxcare.els2 | 2.4.0-7.el9_2.tuxcare.els2 |
openjpeg2-develTuxCare:AlmaLinux:9.2 From an advisory covering 2 CVEs |
before 2.4.0-7.el9_2.tuxcare.els2 | 2.4.0-7.el9_2.tuxcare.els2 |
openjpeg2-devel-docsTuxCare:AlmaLinux:9.2 From an advisory covering 2 CVEs |
before 2.4.0-7.el9_2.tuxcare.els2 | 2.4.0-7.el9_2.tuxcare.els2 |
openjpeg2-toolsTuxCare:AlmaLinux:9.2 From an advisory covering 2 CVEs |
before 2.4.0-7.el9_2.tuxcare.els2 | 2.4.0-7.el9_2.tuxcare.els2 |
openjpeg2TuxCare:AlmaLinux:9.6 From an advisory covering 2 CVEs |
before 2.4.0-8.el9.tuxcare.els1 | 2.4.0-8.el9.tuxcare.els1 |
openjpeg2-develTuxCare:AlmaLinux:9.6 From an advisory covering 2 CVEs |
before 2.4.0-8.el9.tuxcare.els1 | 2.4.0-8.el9.tuxcare.els1 |
Show 61 moreShow less
| Package | Affected | Fixed |
|---|---|---|
openjpeg2-devel-docsTuxCare:AlmaLinux:9.6 From an advisory covering 2 CVEs |
before 2.4.0-8.el9.tuxcare.els1 | 2.4.0-8.el9.tuxcare.els1 |
openjpeg2-toolsTuxCare:AlmaLinux:9.6 From an advisory covering 2 CVEs |
before 2.4.0-8.el9.tuxcare.els1 | 2.4.0-8.el9.tuxcare.els1 |
openjpeg2Debian:12 |
All versions, plus listed versions 2.5.0-22.5.0-2+deb12u12.5.0-2+deb12u22.5.0-2+deb12u32.5.3-1 Show 8 moreShow less2.5.3-1~exp12.5.3-1~exp22.5.3-22.5.3-2.12.5.3-2.1~deb13u12.5.3-2.1~deb13u22.5.4-12.5.4-1.1 |
None known |
openjpeg2Debian:13 |
All versions, plus listed versions 2.5.3-22.5.3-2.12.5.3-2.1~deb13u12.5.3-2.1~deb13u22.5.4-12.5.4-1.1 |
None known |
openjpeg2Debian:14 |
All versions, plus listed versions 2.5.3-22.5.3-2.12.5.3-2.1~deb13u12.5.3-2.1~deb13u22.5.4-12.5.4-1.1 |
None known |
OpenJpeg_jllJulia |
2.5.0+0 up to 2.5.2+0 | 2.5.2+0 |
openjpeg2Mageia:9 |
before 2.5.0-1.1.mga9 | 2.5.0-1.1.mga9 |
openjpeg2Root:Debian:13 |
before 2.5.3-2.1~deb13u2.aikido.6 | 2.5.3-2.1~deb13u2.aikido.62.5.3-2.1~deb13u2.root.io.5 |
rootio-openjpeg2Root:Debian:13 |
before 2.5.3-2.1~deb13u2.aikido.6 | 2.5.3-2.1~deb13u2.aikido.62.5.3-2.1~deb13u2.root.io.5 |
openjpegSUSE:Linux Enterprise Module for Desktop Applications 15 SP6 |
before 1.5.2-150000.4.15.1 | 1.5.2-150000.4.15.1 |
openjpegSUSE:Linux Enterprise Module for Desktop Applications 15 SP7 |
before 1.5.2-150000.4.15.1 | 1.5.2-150000.4.15.1 |
openjpegopenSUSE:Leap 15.6 |
before 1.5.2-150000.4.15.1 | 1.5.2-150000.4.15.1 |
openjpeg2SUSE:Linux Enterprise Server LTSS Extended Security 12 SP5 |
before 2.1.0-4.27.1 | 2.1.0-4.27.1 |
openjpeg2SUSE:Linux Enterprise Module for Basesystem 15 SP7 |
before 2.3.0-150000.3.24.1 | 2.3.0-150000.3.24.1 |
openjpeg2SUSE:Linux Enterprise Module for Package Hub 15 SP7 |
before 2.3.0-150000.3.24.1 | 2.3.0-150000.3.24.1 |
openjpeg2openSUSE:Leap 15.6 |
before 2.3.0-150000.3.24.1 | 2.3.0-150000.3.24.1 |
openjpeg2SUSE:Linux Enterprise Server 16.0 |
before 2.5.3-160000.3.1 | 2.5.3-160000.3.1 |
openjpeg2SUSE:Linux Enterprise Server for SAP applications 16.0 |
before 2.5.3-160000.3.1 | 2.5.3-160000.3.1 |
openjpegUbuntu:14.04:LTS |
All versions, plus listed versions 1.3+dfsg-4.6ubuntu21.3+dfsg-4.7ubuntu1 |
None known |
ghostscriptUbuntu:Pro:16.04:LTS |
before 9.26~dfsg+0-0ubuntu0.16.04.14+esm9, plus listed versions 9.16~dfsg~0-0ubuntu39.16~dfsg~0-0ubuntu49.18~dfsg~0-0ubuntu19.18~dfsg~0-0ubuntu29.18~dfsg~0-0ubuntu2.2 Show 30 moreShow less9.18~dfsg~0-0ubuntu2.39.18~dfsg~0-0ubuntu2.49.18~dfsg~0-0ubuntu2.69.18~dfsg~0-0ubuntu2.79.18~dfsg~0-0ubuntu2.89.18~dfsg~0-0ubuntu2.99.25~dfsg+1-0ubuntu0.16.04.19.25~dfsg+1-0ubuntu0.16.04.29.25~dfsg+1-0ubuntu0.16.04.39.26~dfsg+0-0ubuntu0.16.04.19.26~dfsg+0-0ubuntu0.16.04.39.26~dfsg+0-0ubuntu0.16.04.49.26~dfsg+0-0ubuntu0.16.04.59.26~dfsg+0-0ubuntu0.16.04.69.26~dfsg+0-0ubuntu0.16.04.79.26~dfsg+0-0ubuntu0.16.04.89.26~dfsg+0-0ubuntu0.16.04.99.26~dfsg+0-0ubuntu0.16.04.109.26~dfsg+0-0ubuntu0.16.04.119.26~dfsg+0-0ubuntu0.16.04.129.26~dfsg+0-0ubuntu0.16.04.139.26~dfsg+0-0ubuntu0.16.04.149.26~dfsg+0-0ubuntu0.16.04.14+esm19.26~dfsg+0-0ubuntu0.16.04.14+esm29.26~dfsg+0-0ubuntu0.16.04.14+esm39.26~dfsg+0-0ubuntu0.16.04.14+esm49.26~dfsg+0-0ubuntu0.16.04.14+esm59.26~dfsg+0-0ubuntu0.16.04.14+esm69.26~dfsg+0-0ubuntu0.16.04.14+esm79.26~dfsg+0-0ubuntu0.16.04.14+esm8 |
9.26~dfsg+0-0ubuntu0.16.04.14+esm9 |
openjpeg2Ubuntu:Pro:16.04:LTS |
before 2.1.2-1.1+deb9u6ubuntu0.1~esm4, plus listed versions 2.1.0-2.12.1.0-2.1ubuntu0.12.1.2-1.1+deb9u2build0.12.1.2-1.1+deb9u3build0.16.04.12.1.2-1.1+deb9u3ubuntu0.1~esm1 Show 5 moreShow less2.1.2-1.1+deb9u5build0.16.04.12.1.2-1.1+deb9u5ubuntu0.1~esm12.1.2-1.1+deb9u6build0.16.04.12.1.2-1.1+deb9u6ubuntu0.1~esm12.1.2-1.1+deb9u6ubuntu0.1~esm3 |
2.1.2-1.1+deb9u6ubuntu0.1~esm4 |
blenderUbuntu:16.04:LTS |
All versions, plus listed versions 2.74+dfsg0-4build22.75.a+dfsg0-2ubuntu22.75.a+dfsg0-2ubuntu32.76.b+dfsg0-32.76.b+dfsg0-3build1 |
None known |
insighttoolkit4Ubuntu:16.04:LTS |
All versions, plus listed versions 4.8.1-1ubuntu34.8.1-1ubuntu44.8.2-3.1ubuntu14.9.0-3ubuntu24.9.0-4ubuntu14.9.0-4ubuntu1.1 |
None known |
openjpegUbuntu:Pro:16.04:LTS |
All versions, plus listed versions 1:1.5.2-3.11:1.5.2-3.1ubuntu0.1~esm2 |
None known |
texmakerUbuntu:16.04:LTS |
All versions, plus listed versions 4.4.1-14.4.1-1.1 |
None known |
ghostscriptUbuntu:Pro:18.04:LTS |
before 9.26~dfsg+0-0ubuntu0.18.04.18+esm4, plus listed versions 9.21~dfsg+1-0ubuntu39.22~dfsg+1-0ubuntu19.22~dfsg+1-0ubuntu1.19.22~dfsg+1-0ubuntu1.29.25~dfsg+1-0ubuntu0.18.04.1 Show 21 moreShow less9.25~dfsg+1-0ubuntu0.18.04.29.26~dfsg+0-0ubuntu0.18.04.19.26~dfsg+0-0ubuntu0.18.04.39.26~dfsg+0-0ubuntu0.18.04.49.26~dfsg+0-0ubuntu0.18.04.59.26~dfsg+0-0ubuntu0.18.04.69.26~dfsg+0-0ubuntu0.18.04.79.26~dfsg+0-0ubuntu0.18.04.89.26~dfsg+0-0ubuntu0.18.04.99.26~dfsg+0-0ubuntu0.18.04.109.26~dfsg+0-0ubuntu0.18.04.119.26~dfsg+0-0ubuntu0.18.04.129.26~dfsg+0-0ubuntu0.18.04.139.26~dfsg+0-0ubuntu0.18.04.149.26~dfsg+0-0ubuntu0.18.04.159.26~dfsg+0-0ubuntu0.18.04.169.26~dfsg+0-0ubuntu0.18.04.179.26~dfsg+0-0ubuntu0.18.04.189.26~dfsg+0-0ubuntu0.18.04.18+esm19.26~dfsg+0-0ubuntu0.18.04.18+esm29.26~dfsg+0-0ubuntu0.18.04.18+esm3 |
9.26~dfsg+0-0ubuntu0.18.04.18+esm4 |
blenderUbuntu:18.04:LTS |
All versions, plus listed versions 2.78.c+dfsg0-2build12.79+dfsg0-2build12.79+dfsg0-32.79+dfsg0-3build12.79.b+dfsg0-12.79.b+dfsg0-1ubuntu1.18.04.1 |
None known |
insighttoolkit4Ubuntu:18.04:LTS |
All versions, plus listed versions 4.12.2-dfsg1-1ubuntu1 |
None known |
openjpeg2Ubuntu:Pro:18.04:LTS |
before 2.3.0-2+deb10u2ubuntu0.1~esm2, plus listed versions 2.2.0-12.3.0-12.3.0-2build0.18.04.12.3.0-2ubuntu0.1~esm12.3.0-2+deb10u2build0.18.04.12.3.0-2+deb10u2ubuntu0.1~esm1 |
2.3.0-2+deb10u2ubuntu0.1~esm2 |
qtwebengine-opensource-srcUbuntu:Pro:18.04:LTS |
All versions, plus listed versions 5.9.1+dfsg-45.9.1+dfsg-4ubuntu15.9.2+dfsg-2ubuntu15.9.3+dfsg-0ubuntu15.9.4+dfsg-0ubuntu15.9.5+dfsg-0ubuntu25.9.5+dfsg-0ubuntu2+esm1 |
None known |
texmakerUbuntu:Pro:18.04:LTS |
All versions, plus listed versions 4.5-15.0.2-15.0.2-1build15.0.2-1build25.0.2-1ubuntu0.1~esm1 |
None known |
openjpeg2Ubuntu:20.04:LTS |
before 2.3.1-1ubuntu4.20.04.2, plus listed versions 2.3.0-22.3.0-2build12.3.1-12.3.1-1ubuntu32.3.1-1ubuntu42.3.1-1ubuntu4.20.04.1 |
2.3.1-1ubuntu4.20.04.2 |
blenderUbuntu:20.04:LTS |
All versions, plus listed versions 2.80+dfsg-32.80+dfsg-3build12.80+dfsg-42.81.a+dfsg-5build32.82+dfsg-12.82+dfsg-1build12.82.a+dfsg-1 |
None known |
insighttoolkit4Ubuntu:20.04:LTS |
All versions, plus listed versions 4.12.2-dfsg1-4.1ubuntu14.13.2-dfsg1-1ubuntu14.13.2-dfsg1-4ubuntu14.13.2-dfsg1-64.13.2-dfsg1-6ubuntu14.13.2-dfsg1-8 |
None known |
qtwebengine-opensource-srcUbuntu:Pro:20.04:LTS |
All versions, plus listed versions 5.12.4+dfsg-1ubuntu15.12.4+dfsg-1ubuntu35.12.5+dfsg-3ubuntu15.12.5+dfsg-6ubuntu25.12.5+dfsg-7 Show 4 moreShow less5.12.5+dfsg-7build15.12.8+dfsg-0ubuntu15.12.8+dfsg-0ubuntu1.15.12.8+dfsg-0ubuntu1.1+esm1 |
None known |
texmakerUbuntu:Pro:20.04:LTS |
All versions, plus listed versions 5.0.3-1build25.0.3-1build35.0.3-1build45.0.3-1build55.0.3-1ubuntu0.20.04.1~esm1 |
None known |
blenderUbuntu:22.04:LTS |
All versions, plus listed versions 2.93.3+dfsg-32.93.5+dfsg-12.93.5+dfsg-1build13.0.1+dfsg-7 |
None known |
insighttoolkit4Ubuntu:22.04:LTS |
All versions, plus listed versions 4.13.3withdata-dfsg1-4.14.13.3withdata-dfsg2-1ubuntu1 |
None known |
openjpeg2Ubuntu:22.04:LTS |
before 2.4.0-6ubuntu0.1, plus listed versions 2.3.1-1ubuntu52.3.1-1ubuntu62.4.0-32.4.0-52.4.0-6 |
2.4.0-6ubuntu0.1 |
qtwebengine-opensource-srcUbuntu:Pro:22.04:LTS |
All versions, plus listed versions 5.15.6+dfsg-15.15.6+dfsg-25.15.7+dfsg-25.15.8+dfsg-15.15.8+dfsg-1build1 Show 4 moreShow less5.15.8+dfsg-1build25.15.8+dfsg-25.15.9+dfsg-15.15.9+dfsg-1ubuntu0.1~esm1 |
None known |
texmakerUbuntu:Pro:22.04:LTS |
All versions, plus listed versions 5.0.3-1build85.0.3-1build95.0.3-1ubuntu0.22.04.1~esm1 |
None known |
blenderUbuntu:24.04:LTS |
All versions, plus listed versions 3.6.2+dfsg-2ubuntu13.6.2+dfsg-2ubuntu24.0.2+dfsg-1ubuntu14.0.2+dfsg-1ubuntu24.0.2+dfsg-1ubuntu44.0.2+dfsg-1ubuntu64.0.2+dfsg-1ubuntu74.0.2+dfsg-1ubuntu8 |
None known |
openjpeg2Ubuntu:24.04:LTS |
before 2.5.0-2ubuntu0.1, plus listed versions 2.5.0-22.5.0-2build22.5.0-2build3 |
2.5.0-2ubuntu0.1 |
qtwebengine-opensource-srcUbuntu:Pro:24.04:LTS |
All versions, plus listed versions 5.15.15+dfsg-25.15.15+dfsg-2build25.15.15+dfsg-2ubuntu15.15.16+dfsg-15.15.16+dfsg-1ubuntu25.15.16+dfsg-1ubuntu45.15.16+dfsg-35.15.16+dfsg-3ubuntu0.1~esm1 |
None known |
texmakerUbuntu:Pro:24.04:LTS |
All versions, plus listed versions 5.1.3+dfsg-1build45.1.3+dfsg-1build55.1.3+dfsg-1build65.1.3+dfsg-1build75.1.3+dfsg-1build85.1.3+dfsg-1ubuntu0.1~esm1 |
None known |
blenderUbuntu:25.10 |
All versions, plus listed versions 4.3.2+dfsg-24.3.2+dfsg-2ubuntu14.3.2+dfsg-2ubuntu2 |
None known |
qtwebengine-opensource-srcUbuntu:25.10 |
All versions, plus listed versions 5.15.18+dfsg-25.15.18+dfsg-2build15.15.19+dfsg-15.15.19+dfsg2-1 |
None known |
texmakerUbuntu:25.10 |
All versions, plus listed versions 5.1.3+dfsg-35.1.3+dfsg-3build1 |
None known |
blenderUbuntu:26.10 |
All versions, plus listed versions 5.0.1+dfsg-1ubuntu15.0.1+dfsg-1ubuntu35.0.1+dfsg-3build15.0.1+dfsg-5 |
None known |
qtwebengine-opensource-srcUbuntu:26.10 |
All versions, plus listed versions 5.15.19+dfsg2-45.15.19+dfsg2-65.15.19+dfsg2-7 |
None known |
texmakerUbuntu:26.10 |
All versions, plus listed versions 6.0.1+dfsg-3build16.0.1+dfsg-3build2 |
None known |
blenderUbuntu:26.04:LTS |
All versions, plus listed versions 4.3.2+dfsg-2ubuntu25.0.1+dfsg-1ubuntu1 |
None known |
texmakerUbuntu:26.04:LTS |
All versions, plus listed versions 5.1.3+dfsg-3build16.0.1+dfsg-36.0.1+dfsg-3build1 |
None known |
qtwebengine-opensource-srcUbuntu:Pro:26.04:LTS |
All versions, plus listed versions 5.15.19+dfsg2-15.15.19+dfsg2-1build15.15.19+dfsg2-25.15.19+dfsg2-35.15.19+dfsg2-45.15.19+dfsg2-4ubuntu0.1~esm1 |
None known |
ghostscriptUbuntu:Pro:16.04:LTS From an advisory covering 8 CVEs |
before 9.26~dfsg+0-0ubuntu0.16.04.14+esm9, plus listed versions 9.16~dfsg~0-0ubuntu39.16~dfsg~0-0ubuntu49.18~dfsg~0-0ubuntu19.18~dfsg~0-0ubuntu29.18~dfsg~0-0ubuntu2.2 Show 30 moreShow less9.18~dfsg~0-0ubuntu2.39.18~dfsg~0-0ubuntu2.49.18~dfsg~0-0ubuntu2.69.18~dfsg~0-0ubuntu2.79.18~dfsg~0-0ubuntu2.89.18~dfsg~0-0ubuntu2.99.25~dfsg+1-0ubuntu0.16.04.19.25~dfsg+1-0ubuntu0.16.04.29.25~dfsg+1-0ubuntu0.16.04.39.26~dfsg+0-0ubuntu0.16.04.19.26~dfsg+0-0ubuntu0.16.04.39.26~dfsg+0-0ubuntu0.16.04.49.26~dfsg+0-0ubuntu0.16.04.59.26~dfsg+0-0ubuntu0.16.04.69.26~dfsg+0-0ubuntu0.16.04.79.26~dfsg+0-0ubuntu0.16.04.89.26~dfsg+0-0ubuntu0.16.04.99.26~dfsg+0-0ubuntu0.16.04.109.26~dfsg+0-0ubuntu0.16.04.119.26~dfsg+0-0ubuntu0.16.04.129.26~dfsg+0-0ubuntu0.16.04.139.26~dfsg+0-0ubuntu0.16.04.149.26~dfsg+0-0ubuntu0.16.04.14+esm19.26~dfsg+0-0ubuntu0.16.04.14+esm29.26~dfsg+0-0ubuntu0.16.04.14+esm39.26~dfsg+0-0ubuntu0.16.04.14+esm49.26~dfsg+0-0ubuntu0.16.04.14+esm59.26~dfsg+0-0ubuntu0.16.04.14+esm69.26~dfsg+0-0ubuntu0.16.04.14+esm79.26~dfsg+0-0ubuntu0.16.04.14+esm8 |
9.26~dfsg+0-0ubuntu0.16.04.14+esm9 |
ghostscriptUbuntu:Pro:18.04:LTS From an advisory covering 8 CVEs |
before 9.26~dfsg+0-0ubuntu0.18.04.18+esm4, plus listed versions 9.21~dfsg+1-0ubuntu39.22~dfsg+1-0ubuntu19.22~dfsg+1-0ubuntu1.19.22~dfsg+1-0ubuntu1.29.25~dfsg+1-0ubuntu0.18.04.1 Show 21 moreShow less9.25~dfsg+1-0ubuntu0.18.04.29.26~dfsg+0-0ubuntu0.18.04.19.26~dfsg+0-0ubuntu0.18.04.39.26~dfsg+0-0ubuntu0.18.04.49.26~dfsg+0-0ubuntu0.18.04.59.26~dfsg+0-0ubuntu0.18.04.69.26~dfsg+0-0ubuntu0.18.04.79.26~dfsg+0-0ubuntu0.18.04.89.26~dfsg+0-0ubuntu0.18.04.99.26~dfsg+0-0ubuntu0.18.04.109.26~dfsg+0-0ubuntu0.18.04.119.26~dfsg+0-0ubuntu0.18.04.129.26~dfsg+0-0ubuntu0.18.04.139.26~dfsg+0-0ubuntu0.18.04.149.26~dfsg+0-0ubuntu0.18.04.159.26~dfsg+0-0ubuntu0.18.04.169.26~dfsg+0-0ubuntu0.18.04.179.26~dfsg+0-0ubuntu0.18.04.189.26~dfsg+0-0ubuntu0.18.04.18+esm19.26~dfsg+0-0ubuntu0.18.04.18+esm29.26~dfsg+0-0ubuntu0.18.04.18+esm3 |
9.26~dfsg+0-0ubuntu0.18.04.18+esm4 |
ghostscriptUbuntu:Pro:20.04:LTS From an advisory covering 8 CVEs |
before 9.50~dfsg-5ubuntu4.15+esm1, plus listed versions 9.27~dfsg+0-0ubuntu39.27~dfsg+0-0ubuntu49.50~dfsg-5ubuntu19.50~dfsg-5ubuntu29.50~dfsg-5ubuntu3 Show 16 moreShow less9.50~dfsg-5ubuntu49.50~dfsg-5ubuntu4.19.50~dfsg-5ubuntu4.29.50~dfsg-5ubuntu4.39.50~dfsg-5ubuntu4.49.50~dfsg-5ubuntu4.59.50~dfsg-5ubuntu4.69.50~dfsg-5ubuntu4.79.50~dfsg-5ubuntu4.89.50~dfsg-5ubuntu4.99.50~dfsg-5ubuntu4.109.50~dfsg-5ubuntu4.119.50~dfsg-5ubuntu4.129.50~dfsg-5ubuntu4.139.50~dfsg-5ubuntu4.149.50~dfsg-5ubuntu4.15 |
9.50~dfsg-5ubuntu4.15+esm1 |
ghostscriptUbuntu:22.04:LTS From an advisory covering 8 CVEs |
before 9.55.0~dfsg1-0ubuntu5.12, plus listed versions 9.54.0~dfsg1-0ubuntu29.55.0~dfsg1-0ubuntu49.55.0~dfsg1-0ubuntu59.55.0~dfsg1-0ubuntu5.19.55.0~dfsg1-0ubuntu5.2 Show 8 moreShow less9.55.0~dfsg1-0ubuntu5.39.55.0~dfsg1-0ubuntu5.49.55.0~dfsg1-0ubuntu5.59.55.0~dfsg1-0ubuntu5.69.55.0~dfsg1-0ubuntu5.79.55.0~dfsg1-0ubuntu5.99.55.0~dfsg1-0ubuntu5.109.55.0~dfsg1-0ubuntu5.11 |
9.55.0~dfsg1-0ubuntu5.12 |
ghostscriptUbuntu:24.04:LTS From an advisory covering 8 CVEs |
before 10.02.1~dfsg1-0ubuntu7.7, plus listed versions 10.01.2~dfsg1-0ubuntu210.01.2~dfsg1-0ubuntu2.110.02.1~dfsg1-0ubuntu110.02.1~dfsg1-0ubuntu210.02.1~dfsg1-0ubuntu5 Show 7 moreShow less10.02.1~dfsg1-0ubuntu610.02.1~dfsg1-0ubuntu710.02.1~dfsg1-0ubuntu7.110.02.1~dfsg1-0ubuntu7.310.02.1~dfsg1-0ubuntu7.410.02.1~dfsg1-0ubuntu7.510.02.1~dfsg1-0ubuntu7.6 |
10.02.1~dfsg1-0ubuntu7.7 |
openjpeg2openSUSE:Tumbleweed |
before 2.5.4-2.1 | 2.5.4-2.1 |
openjpeg2openSUSE:Leap 16.0 |
before 2.5.3-160000.3.1 | 2.5.3-160000.3.1 |
History
| Recorded | Changed | Sources |
|---|---|---|
| affected | ||
| facts | OSV | |
| affected | ||
| first indexed | CVE List, EUVD, GitHub Advisories, NVD, OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2023-39327 is a medium vulnerability (CVSS 4.3) in Uclouvain Openjpeg, published July 5, 2024. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 0.56%, the 46th percentile. Fixed in OpenJpeg_jll 2.5.2+0.
References
access.redhat.com/errata/RHSA-2026:4128
bugzilla.redhat.com/show_bug.cgi?id=2295812
github.com/uclouvain/openjpeg/issues/1472
nvd.nist.gov/vuln/detail/CVE-2023-39327
Show 30 moreShow less
docs.bell-sw.com/security/cves/CVE-2023-39327
errata.tuxcare.com/els_os/almalinux9.2esu/CLSA-2026-1786708350.html
catalog.redhat.com/software/containers
openjpeg.org
security-tracker.debian.org/tracker/CVE-2023-39327
advisories.mageia.org/MGASA-2024-0323.html
bugs.mageia.org/show_bug.cgi?id=33595
ubuntu.com/security/notices/USN-7037-1
suse.com/support/update/announcement/2025/suse-su-20253946-1
bugzilla.suse.com/1227410
cve.org/CVERecord?id=CVE-2023-39327