{"id":"CVE-2023-39327","aliases":["AZL-73323","AZL-73362","BELL-CVE-2023-39327","CLSA-2026-1786708350","CLSA-2026-1787149537","DEBIAN-CVE-2023-39327","EUVD-2023-43058","GHSA-f7p4-6cq7-whmw","JLSEC-2026-548","MGASA-2024-0323","ROOT-OS-DEBIAN-11-CVE-2023-39327","ROOT-OS-DEBIAN-13-CVE-2023-39327","SUSE-SU-2025:3946-1","SUSE-SU-2026:0320-1","SUSE-SU-2026:0330-1","SUSE-SU-2026:20422-1","UBUNTU-CVE-2023-39327","USN-7037-1","USN-7623-1","openSUSE-SU-2026:10095-1","openSUSE-SU-2026:20203-1"],"status":"published","title":"Openjpeg: malicious files can cause the program to enter a large loop","description":"A flaw was found in OpenJPEG. Maliciously constructed pictures can cause the program to enter a large loop and continuously print warning messages on the terminal.","severity":{"version":"3.1","score":4.3,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","level":"medium","assessor":"cna","from":"cve"},"epss":{"day":"2026-11-11","score":0.00555,"percentile":0.46737,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":true},"cwes":["CWE-400"],"published":"2024-07-05T05:57:06.245978Z","modified":"2026-11-05T05:36:30Z","fixes":[{"ecosystem":"Julia","package":"OpenJpeg_jll","fixed_in":["2.5.2+0"],"sources":["osv"]},{"ecosystem":"Mageia:9","package":"openjpeg2","fixed_in":["2.5.0-1.1.mga9"],"sources":["osv"]},{"ecosystem":"Root:Debian:13","package":"openjpeg2","fixed_in":["2.5.3-2.1~deb13u2.aikido.6","2.5.3-2.1~deb13u2.root.io.5"],"sources":["osv"]},{"ecosystem":"Root:Debian:13","package":"rootio-openjpeg2","fixed_in":["2.5.3-2.1~deb13u2.aikido.6","2.5.3-2.1~deb13u2.root.io.5"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Module for Desktop Applications 15 SP6","package":"openjpeg","fixed_in":["1.5.2-150000.4.15.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Module for Desktop Applications 15 SP7","package":"openjpeg","fixed_in":["1.5.2-150000.4.15.1"],"sources":["osv"]},{"ecosystem":"openSUSE:Leap 15.6","package":"openjpeg","fixed_in":["1.5.2-150000.4.15.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server LTSS Extended Security 12 SP5","package":"openjpeg2","fixed_in":["2.1.0-4.27.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Module for Basesystem 15 SP7","package":"openjpeg2","fixed_in":["2.3.0-150000.3.24.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Module for Package Hub 15 SP7","package":"openjpeg2","fixed_in":["2.3.0-150000.3.24.1"],"sources":["osv"]},{"ecosystem":"openSUSE:Leap 15.6","package":"openjpeg2","fixed_in":["2.3.0-150000.3.24.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server 16.0","package":"openjpeg2","fixed_in":["2.5.3-160000.3.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server for SAP applications 16.0","package":"openjpeg2","fixed_in":["2.5.3-160000.3.1"],"sources":["osv"]},{"ecosystem":"Ubuntu:Pro:16.04:LTS","package":"ghostscript","fixed_in":["9.26~dfsg+0-0ubuntu0.16.04.14+esm9"],"sources":["osv"]},{"ecosystem":"Ubuntu:Pro:16.04:LTS","package":"openjpeg2","fixed_in":["2.1.2-1.1+deb9u6ubuntu0.1~esm4"],"sources":["osv"]},{"ecosystem":"Ubuntu:Pro:18.04:LTS","package":"ghostscript","fixed_in":["9.26~dfsg+0-0ubuntu0.18.04.18+esm4"],"sources":["osv"]},{"ecosystem":"Ubuntu:Pro:18.04:LTS","package":"openjpeg2","fixed_in":["2.3.0-2+deb10u2ubuntu0.1~esm2"],"sources":["osv"]},{"ecosystem":"Ubuntu:20.04:LTS","package":"openjpeg2","fixed_in":["2.3.1-1ubuntu4.20.04.2"],"sources":["osv"]},{"ecosystem":"Ubuntu:22.04:LTS","package":"openjpeg2","fixed_in":["2.4.0-6ubuntu0.1"],"sources":["osv"]},{"ecosystem":"Ubuntu:24.04:LTS","package":"openjpeg2","fixed_in":["2.5.0-2ubuntu0.1"],"sources":["osv"]},{"ecosystem":"openSUSE:Tumbleweed","package":"openjpeg2","fixed_in":["2.5.4-2.1"],"sources":["osv"]},{"ecosystem":"openSUSE:Leap 16.0","package":"openjpeg2","fixed_in":["2.5.3-160000.3.1"],"sources":["osv"]}],"affected":[{"source":"osv","ecosystem":"Azure Linux:3","package":"openjpeg2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"last_affected":"2.3.1-12"}]}]},{"source":"osv","ecosystem":"Azure Linux:2","package":"openjpeg2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"last_affected":"2.3.1-12"}]}]},{"source":"osv","ecosystem":"Alpaquita:23","package":"openjpeg","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"2.5.0-r0"}]}]},{"source":"osv","ecosystem":"Alpaquita:stream","package":"openjpeg","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"2.5.0-r0"}]}]},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.2","package":"openjpeg2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.0-7.el9_2.tuxcare.els2"}]}],"bundled":2},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.2","package":"openjpeg2-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.0-7.el9_2.tuxcare.els2"}]}],"bundled":2},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.2","package":"openjpeg2-devel-docs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.0-7.el9_2.tuxcare.els2"}]}],"bundled":2},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.2","package":"openjpeg2-tools","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.0-7.el9_2.tuxcare.els2"}]}],"bundled":2},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.6","package":"openjpeg2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.0-8.el9.tuxcare.els1"}]}],"bundled":2},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.6","package":"openjpeg2-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.0-8.el9.tuxcare.els1"}]}],"bundled":2},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.6","package":"openjpeg2-devel-docs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.0-8.el9.tuxcare.els1"}]}],"bundled":2},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.6","package":"openjpeg2-tools","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.0-8.el9.tuxcare.els1"}]}],"bundled":2},{"source":"osv","ecosystem":"Debian:12","package":"openjpeg2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["2.5.0-2","2.5.0-2+deb12u1","2.5.0-2+deb12u2","2.5.0-2+deb12u3","2.5.3-1","2.5.3-1~exp1","2.5.3-1~exp2","2.5.3-2","2.5.3-2.1","2.5.3-2.1~deb13u1","2.5.3-2.1~deb13u2","2.5.4-1","2.5.4-1.1"]},{"source":"osv","ecosystem":"Debian:13","package":"openjpeg2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["2.5.3-2","2.5.3-2.1","2.5.3-2.1~deb13u1","2.5.3-2.1~deb13u2","2.5.4-1","2.5.4-1.1"]},{"source":"osv","ecosystem":"Debian:14","package":"openjpeg2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["2.5.3-2","2.5.3-2.1","2.5.3-2.1~deb13u1","2.5.3-2.1~deb13u2","2.5.4-1","2.5.4-1.1"]},{"source":"osv","ecosystem":"Julia","package":"OpenJpeg_jll","ranges":[{"type":"SEMVER","events":[{"introduced":"2.5.0+0"},{"fixed":"2.5.2+0"}]}]},{"source":"osv","ecosystem":"Mageia:9","package":"openjpeg2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.5.0-1.1.mga9"}]}]},{"source":"osv","ecosystem":"Root:Debian:13","package":"openjpeg2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.5.3-2.1~deb13u2.aikido.6"},{"fixed":"2.5.3-2.1~deb13u2.root.io.5"}]}]},{"source":"osv","ecosystem":"Root:Debian:13","package":"rootio-openjpeg2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.5.3-2.1~deb13u2.aikido.6"},{"fixed":"2.5.3-2.1~deb13u2.root.io.5"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Desktop Applications 15 SP6","package":"openjpeg","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.5.2-150000.4.15.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Desktop Applications 15 SP7","package":"openjpeg","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.5.2-150000.4.15.1"}]}]},{"source":"osv","ecosystem":"openSUSE:Leap 15.6","package":"openjpeg","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.5.2-150000.4.15.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server LTSS Extended Security 12 SP5","package":"openjpeg2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.1.0-4.27.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Basesystem 15 SP7","package":"openjpeg2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.3.0-150000.3.24.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Package Hub 15 SP7","package":"openjpeg2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.3.0-150000.3.24.1"}]}]},{"source":"osv","ecosystem":"openSUSE:Leap 15.6","package":"openjpeg2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.3.0-150000.3.24.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 16.0","package":"openjpeg2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.5.3-160000.3.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP applications 16.0","package":"openjpeg2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.5.3-160000.3.1"}]}]},{"source":"osv","ecosystem":"Ubuntu:14.04:LTS","package":"openjpeg","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["1.3+dfsg-4.6ubuntu2","1.3+dfsg-4.7ubuntu1"]},{"source":"osv","ecosystem":"Ubuntu:Pro:16.04:LTS","package":"ghostscript","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"9.26~dfsg+0-0ubuntu0.16.04.14+esm9"}]}],"versions":["9.16~dfsg~0-0ubuntu3","9.16~dfsg~0-0ubuntu4","9.18~dfsg~0-0ubuntu1","9.18~dfsg~0-0ubuntu2","9.18~dfsg~0-0ubuntu2.2","9.18~dfsg~0-0ubuntu2.3","9.18~dfsg~0-0ubuntu2.4","9.18~dfsg~0-0ubuntu2.6","9.18~dfsg~0-0ubuntu2.7","9.18~dfsg~0-0ubuntu2.8","9.18~dfsg~0-0ubuntu2.9","9.25~dfsg+1-0ubuntu0.16.04.1","9.25~dfsg+1-0ubuntu0.16.04.2","9.25~dfsg+1-0ubuntu0.16.04.3","9.26~dfsg+0-0ubuntu0.16.04.1","9.26~dfsg+0-0ubuntu0.16.04.3","9.26~dfsg+0-0ubuntu0.16.04.4","9.26~dfsg+0-0ubuntu0.16.04.5","9.26~dfsg+0-0ubuntu0.16.04.6","9.26~dfsg+0-0ubuntu0.16.04.7","9.26~dfsg+0-0ubuntu0.16.04.8","9.26~dfsg+0-0ubuntu0.16.04.9","9.26~dfsg+0-0ubuntu0.16.04.10","9.26~dfsg+0-0ubuntu0.16.04.11","9.26~dfsg+0-0ubuntu0.16.04.12","9.26~dfsg+0-0ubuntu0.16.04.13","9.26~dfsg+0-0ubuntu0.16.04.14","9.26~dfsg+0-0ubuntu0.16.04.14+esm1","9.26~dfsg+0-0ubuntu0.16.04.14+esm2","9.26~dfsg+0-0ubuntu0.16.04.14+esm3","9.26~dfsg+0-0ubuntu0.16.04.14+esm4","9.26~dfsg+0-0ubuntu0.16.04.14+esm5","9.26~dfsg+0-0ubuntu0.16.04.14+esm6","9.26~dfsg+0-0ubuntu0.16.04.14+esm7","9.26~dfsg+0-0ubuntu0.16.04.14+esm8"]},{"source":"osv","ecosystem":"Ubuntu:Pro:16.04:LTS","package":"openjpeg2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.1.2-1.1+deb9u6ubuntu0.1~esm4"}]}],"versions":["2.1.0-2.1","2.1.0-2.1ubuntu0.1","2.1.2-1.1+deb9u2build0.1","2.1.2-1.1+deb9u3build0.16.04.1","2.1.2-1.1+deb9u3ubuntu0.1~esm1","2.1.2-1.1+deb9u5build0.16.04.1","2.1.2-1.1+deb9u5ubuntu0.1~esm1","2.1.2-1.1+deb9u6build0.16.04.1","2.1.2-1.1+deb9u6ubuntu0.1~esm1","2.1.2-1.1+deb9u6ubuntu0.1~esm3"]},{"source":"osv","ecosystem":"Ubuntu:16.04:LTS","package":"blender","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["2.74+dfsg0-4build2","2.75.a+dfsg0-2ubuntu2","2.75.a+dfsg0-2ubuntu3","2.76.b+dfsg0-3","2.76.b+dfsg0-3build1"]},{"source":"osv","ecosystem":"Ubuntu:16.04:LTS","package":"insighttoolkit4","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["4.8.1-1ubuntu3","4.8.1-1ubuntu4","4.8.2-3.1ubuntu1","4.9.0-3ubuntu2","4.9.0-4ubuntu1","4.9.0-4ubuntu1.1"]},{"source":"osv","ecosystem":"Ubuntu:Pro:16.04:LTS","package":"openjpeg","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["1:1.5.2-3.1","1:1.5.2-3.1ubuntu0.1~esm2"]},{"source":"osv","ecosystem":"Ubuntu:16.04:LTS","package":"texmaker","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["4.4.1-1","4.4.1-1.1"]},{"source":"osv","ecosystem":"Ubuntu:Pro:18.04:LTS","package":"ghostscript","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"9.26~dfsg+0-0ubuntu0.18.04.18+esm4"}]}],"versions":["9.21~dfsg+1-0ubuntu3","9.22~dfsg+1-0ubuntu1","9.22~dfsg+1-0ubuntu1.1","9.22~dfsg+1-0ubuntu1.2","9.25~dfsg+1-0ubuntu0.18.04.1","9.25~dfsg+1-0ubuntu0.18.04.2","9.26~dfsg+0-0ubuntu0.18.04.1","9.26~dfsg+0-0ubuntu0.18.04.3","9.26~dfsg+0-0ubuntu0.18.04.4","9.26~dfsg+0-0ubuntu0.18.04.5","9.26~dfsg+0-0ubuntu0.18.04.6","9.26~dfsg+0-0ubuntu0.18.04.7","9.26~dfsg+0-0ubuntu0.18.04.8","9.26~dfsg+0-0ubuntu0.18.04.9","9.26~dfsg+0-0ubuntu0.18.04.10","9.26~dfsg+0-0ubuntu0.18.04.11","9.26~dfsg+0-0ubuntu0.18.04.12","9.26~dfsg+0-0ubuntu0.18.04.13","9.26~dfsg+0-0ubuntu0.18.04.14","9.26~dfsg+0-0ubuntu0.18.04.15","9.26~dfsg+0-0ubuntu0.18.04.16","9.26~dfsg+0-0ubuntu0.18.04.17","9.26~dfsg+0-0ubuntu0.18.04.18","9.26~dfsg+0-0ubuntu0.18.04.18+esm1","9.26~dfsg+0-0ubuntu0.18.04.18+esm2","9.26~dfsg+0-0ubuntu0.18.04.18+esm3"]},{"source":"osv","ecosystem":"Ubuntu:18.04:LTS","package":"blender","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["2.78.c+dfsg0-2build1","2.79+dfsg0-2build1","2.79+dfsg0-3","2.79+dfsg0-3build1","2.79.b+dfsg0-1","2.79.b+dfsg0-1ubuntu1.18.04.1"]},{"source":"osv","ecosystem":"Ubuntu:18.04:LTS","package":"insighttoolkit4","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["4.12.2-dfsg1-1ubuntu1"]},{"source":"osv","ecosystem":"Ubuntu:Pro:18.04:LTS","package":"openjpeg2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.3.0-2+deb10u2ubuntu0.1~esm2"}]}],"versions":["2.2.0-1","2.3.0-1","2.3.0-2build0.18.04.1","2.3.0-2ubuntu0.1~esm1","2.3.0-2+deb10u2build0.18.04.1","2.3.0-2+deb10u2ubuntu0.1~esm1"]},{"source":"osv","ecosystem":"Ubuntu:Pro:18.04:LTS","package":"qtwebengine-opensource-src","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["5.9.1+dfsg-4","5.9.1+dfsg-4ubuntu1","5.9.2+dfsg-2ubuntu1","5.9.3+dfsg-0ubuntu1","5.9.4+dfsg-0ubuntu1","5.9.5+dfsg-0ubuntu2","5.9.5+dfsg-0ubuntu2+esm1"]},{"source":"osv","ecosystem":"Ubuntu:Pro:18.04:LTS","package":"texmaker","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["4.5-1","5.0.2-1","5.0.2-1build1","5.0.2-1build2","5.0.2-1ubuntu0.1~esm1"]},{"source":"osv","ecosystem":"Ubuntu:20.04:LTS","package":"openjpeg2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.3.1-1ubuntu4.20.04.2"}]}],"versions":["2.3.0-2","2.3.0-2build1","2.3.1-1","2.3.1-1ubuntu3","2.3.1-1ubuntu4","2.3.1-1ubuntu4.20.04.1"]},{"source":"osv","ecosystem":"Ubuntu:20.04:LTS","package":"blender","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["2.80+dfsg-3","2.80+dfsg-3build1","2.80+dfsg-4","2.81.a+dfsg-5build3","2.82+dfsg-1","2.82+dfsg-1build1","2.82.a+dfsg-1"]},{"source":"osv","ecosystem":"Ubuntu:20.04:LTS","package":"insighttoolkit4","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["4.12.2-dfsg1-4.1ubuntu1","4.13.2-dfsg1-1ubuntu1","4.13.2-dfsg1-4ubuntu1","4.13.2-dfsg1-6","4.13.2-dfsg1-6ubuntu1","4.13.2-dfsg1-8"]},{"source":"osv","ecosystem":"Ubuntu:Pro:20.04:LTS","package":"qtwebengine-opensource-src","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["5.12.4+dfsg-1ubuntu1","5.12.4+dfsg-1ubuntu3","5.12.5+dfsg-3ubuntu1","5.12.5+dfsg-6ubuntu2","5.12.5+dfsg-7","5.12.5+dfsg-7build1","5.12.8+dfsg-0ubuntu1","5.12.8+dfsg-0ubuntu1.1","5.12.8+dfsg-0ubuntu1.1+esm1"]},{"source":"osv","ecosystem":"Ubuntu:Pro:20.04:LTS","package":"texmaker","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["5.0.3-1build2","5.0.3-1build3","5.0.3-1build4","5.0.3-1build5","5.0.3-1ubuntu0.20.04.1~esm1"]},{"source":"osv","ecosystem":"Ubuntu:22.04:LTS","package":"blender","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["2.93.3+dfsg-3","2.93.5+dfsg-1","2.93.5+dfsg-1build1","3.0.1+dfsg-7"]},{"source":"osv","ecosystem":"Ubuntu:22.04:LTS","package":"insighttoolkit4","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["4.13.3withdata-dfsg1-4.1","4.13.3withdata-dfsg2-1ubuntu1"]},{"source":"osv","ecosystem":"Ubuntu:22.04:LTS","package":"openjpeg2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.0-6ubuntu0.1"}]}],"versions":["2.3.1-1ubuntu5","2.3.1-1ubuntu6","2.4.0-3","2.4.0-5","2.4.0-6"]},{"source":"osv","ecosystem":"Ubuntu:Pro:22.04:LTS","package":"qtwebengine-opensource-src","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["5.15.6+dfsg-1","5.15.6+dfsg-2","5.15.7+dfsg-2","5.15.8+dfsg-1","5.15.8+dfsg-1build1","5.15.8+dfsg-1build2","5.15.8+dfsg-2","5.15.9+dfsg-1","5.15.9+dfsg-1ubuntu0.1~esm1"]},{"source":"osv","ecosystem":"Ubuntu:Pro:22.04:LTS","package":"texmaker","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["5.0.3-1build8","5.0.3-1build9","5.0.3-1ubuntu0.22.04.1~esm1"]},{"source":"osv","ecosystem":"Ubuntu:24.04:LTS","package":"blender","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["3.6.2+dfsg-2ubuntu1","3.6.2+dfsg-2ubuntu2","4.0.2+dfsg-1ubuntu1","4.0.2+dfsg-1ubuntu2","4.0.2+dfsg-1ubuntu4","4.0.2+dfsg-1ubuntu6","4.0.2+dfsg-1ubuntu7","4.0.2+dfsg-1ubuntu8"]},{"source":"osv","ecosystem":"Ubuntu:24.04:LTS","package":"openjpeg2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.5.0-2ubuntu0.1"}]}],"versions":["2.5.0-2","2.5.0-2build2","2.5.0-2build3"]},{"source":"osv","ecosystem":"Ubuntu:Pro:24.04:LTS","package":"qtwebengine-opensource-src","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["5.15.15+dfsg-2","5.15.15+dfsg-2build2","5.15.15+dfsg-2ubuntu1","5.15.16+dfsg-1","5.15.16+dfsg-1ubuntu2","5.15.16+dfsg-1ubuntu4","5.15.16+dfsg-3","5.15.16+dfsg-3ubuntu0.1~esm1"]},{"source":"osv","ecosystem":"Ubuntu:Pro:24.04:LTS","package":"texmaker","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["5.1.3+dfsg-1build4","5.1.3+dfsg-1build5","5.1.3+dfsg-1build6","5.1.3+dfsg-1build7","5.1.3+dfsg-1build8","5.1.3+dfsg-1ubuntu0.1~esm1"]},{"source":"osv","ecosystem":"Ubuntu:25.10","package":"blender","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["4.3.2+dfsg-2","4.3.2+dfsg-2ubuntu1","4.3.2+dfsg-2ubuntu2"]},{"source":"osv","ecosystem":"Ubuntu:25.10","package":"qtwebengine-opensource-src","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["5.15.18+dfsg-2","5.15.18+dfsg-2build1","5.15.19+dfsg-1","5.15.19+dfsg2-1"]},{"source":"osv","ecosystem":"Ubuntu:25.10","package":"texmaker","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["5.1.3+dfsg-3","5.1.3+dfsg-3build1"]},{"source":"osv","ecosystem":"Ubuntu:26.10","package":"blender","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["5.0.1+dfsg-1ubuntu1","5.0.1+dfsg-1ubuntu3","5.0.1+dfsg-3build1","5.0.1+dfsg-5"]},{"source":"osv","ecosystem":"Ubuntu:26.10","package":"qtwebengine-opensource-src","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["5.15.19+dfsg2-4","5.15.19+dfsg2-6","5.15.19+dfsg2-7"]},{"source":"osv","ecosystem":"Ubuntu:26.10","package":"texmaker","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["6.0.1+dfsg-3build1","6.0.1+dfsg-3build2"]},{"source":"osv","ecosystem":"Ubuntu:26.04:LTS","package":"blender","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["4.3.2+dfsg-2ubuntu2","5.0.1+dfsg-1ubuntu1"]},{"source":"osv","ecosystem":"Ubuntu:26.04:LTS","package":"texmaker","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["5.1.3+dfsg-3build1","6.0.1+dfsg-3","6.0.1+dfsg-3build1"]},{"source":"osv","ecosystem":"Ubuntu:Pro:26.04:LTS","package":"qtwebengine-opensource-src","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["5.15.19+dfsg2-1","5.15.19+dfsg2-1build1","5.15.19+dfsg2-2","5.15.19+dfsg2-3","5.15.19+dfsg2-4","5.15.19+dfsg2-4ubuntu0.1~esm1"]},{"source":"osv","ecosystem":"Ubuntu:Pro:16.04:LTS","package":"openjpeg2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.1.2-1.1+deb9u6ubuntu0.1~esm4"}]}],"versions":["2.1.0-2.1","2.1.0-2.1ubuntu0.1","2.1.2-1.1+deb9u2build0.1","2.1.2-1.1+deb9u3build0.16.04.1","2.1.2-1.1+deb9u3ubuntu0.1~esm1","2.1.2-1.1+deb9u5build0.16.04.1","2.1.2-1.1+deb9u5ubuntu0.1~esm1","2.1.2-1.1+deb9u6build0.16.04.1","2.1.2-1.1+deb9u6ubuntu0.1~esm1","2.1.2-1.1+deb9u6ubuntu0.1~esm3"]},{"source":"osv","ecosystem":"Ubuntu:Pro:18.04:LTS","package":"openjpeg2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.3.0-2+deb10u2ubuntu0.1~esm2"}]}],"versions":["2.2.0-1","2.3.0-1","2.3.0-2build0.18.04.1","2.3.0-2ubuntu0.1~esm1","2.3.0-2+deb10u2build0.18.04.1","2.3.0-2+deb10u2ubuntu0.1~esm1"]},{"source":"osv","ecosystem":"Ubuntu:20.04:LTS","package":"openjpeg2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.3.1-1ubuntu4.20.04.2"}]}],"versions":["2.3.0-2","2.3.0-2build1","2.3.1-1","2.3.1-1ubuntu3","2.3.1-1ubuntu4","2.3.1-1ubuntu4.20.04.1"]},{"source":"osv","ecosystem":"Ubuntu:22.04:LTS","package":"openjpeg2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.0-6ubuntu0.1"}]}],"versions":["2.3.1-1ubuntu5","2.3.1-1ubuntu6","2.4.0-3","2.4.0-5","2.4.0-6"]},{"source":"osv","ecosystem":"Ubuntu:24.04:LTS","package":"openjpeg2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.5.0-2ubuntu0.1"}]}],"versions":["2.5.0-2","2.5.0-2build2","2.5.0-2build3"]},{"source":"osv","ecosystem":"Ubuntu:Pro:16.04:LTS","package":"ghostscript","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"9.26~dfsg+0-0ubuntu0.16.04.14+esm9"}]}],"versions":["9.16~dfsg~0-0ubuntu3","9.16~dfsg~0-0ubuntu4","9.18~dfsg~0-0ubuntu1","9.18~dfsg~0-0ubuntu2","9.18~dfsg~0-0ubuntu2.2","9.18~dfsg~0-0ubuntu2.3","9.18~dfsg~0-0ubuntu2.4","9.18~dfsg~0-0ubuntu2.6","9.18~dfsg~0-0ubuntu2.7","9.18~dfsg~0-0ubuntu2.8","9.18~dfsg~0-0ubuntu2.9","9.25~dfsg+1-0ubuntu0.16.04.1","9.25~dfsg+1-0ubuntu0.16.04.2","9.25~dfsg+1-0ubuntu0.16.04.3","9.26~dfsg+0-0ubuntu0.16.04.1","9.26~dfsg+0-0ubuntu0.16.04.3","9.26~dfsg+0-0ubuntu0.16.04.4","9.26~dfsg+0-0ubuntu0.16.04.5","9.26~dfsg+0-0ubuntu0.16.04.6","9.26~dfsg+0-0ubuntu0.16.04.7","9.26~dfsg+0-0ubuntu0.16.04.8","9.26~dfsg+0-0ubuntu0.16.04.9","9.26~dfsg+0-0ubuntu0.16.04.10","9.26~dfsg+0-0ubuntu0.16.04.11","9.26~dfsg+0-0ubuntu0.16.04.12","9.26~dfsg+0-0ubuntu0.16.04.13","9.26~dfsg+0-0ubuntu0.16.04.14","9.26~dfsg+0-0ubuntu0.16.04.14+esm1","9.26~dfsg+0-0ubuntu0.16.04.14+esm2","9.26~dfsg+0-0ubuntu0.16.04.14+esm3","9.26~dfsg+0-0ubuntu0.16.04.14+esm4","9.26~dfsg+0-0ubuntu0.16.04.14+esm5","9.26~dfsg+0-0ubuntu0.16.04.14+esm6","9.26~dfsg+0-0ubuntu0.16.04.14+esm7","9.26~dfsg+0-0ubuntu0.16.04.14+esm8"],"bundled":8},{"source":"osv","ecosystem":"Ubuntu:Pro:18.04:LTS","package":"ghostscript","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"9.26~dfsg+0-0ubuntu0.18.04.18+esm4"}]}],"versions":["9.21~dfsg+1-0ubuntu3","9.22~dfsg+1-0ubuntu1","9.22~dfsg+1-0ubuntu1.1","9.22~dfsg+1-0ubuntu1.2","9.25~dfsg+1-0ubuntu0.18.04.1","9.25~dfsg+1-0ubuntu0.18.04.2","9.26~dfsg+0-0ubuntu0.18.04.1","9.26~dfsg+0-0ubuntu0.18.04.3","9.26~dfsg+0-0ubuntu0.18.04.4","9.26~dfsg+0-0ubuntu0.18.04.5","9.26~dfsg+0-0ubuntu0.18.04.6","9.26~dfsg+0-0ubuntu0.18.04.7","9.26~dfsg+0-0ubuntu0.18.04.8","9.26~dfsg+0-0ubuntu0.18.04.9","9.26~dfsg+0-0ubuntu0.18.04.10","9.26~dfsg+0-0ubuntu0.18.04.11","9.26~dfsg+0-0ubuntu0.18.04.12","9.26~dfsg+0-0ubuntu0.18.04.13","9.26~dfsg+0-0ubuntu0.18.04.14","9.26~dfsg+0-0ubuntu0.18.04.15","9.26~dfsg+0-0ubuntu0.18.04.16","9.26~dfsg+0-0ubuntu0.18.04.17","9.26~dfsg+0-0ubuntu0.18.04.18","9.26~dfsg+0-0ubuntu0.18.04.18+esm1","9.26~dfsg+0-0ubuntu0.18.04.18+esm2","9.26~dfsg+0-0ubuntu0.18.04.18+esm3"],"bundled":8},{"source":"osv","ecosystem":"Ubuntu:Pro:20.04:LTS","package":"ghostscript","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"9.50~dfsg-5ubuntu4.15+esm1"}]}],"versions":["9.27~dfsg+0-0ubuntu3","9.27~dfsg+0-0ubuntu4","9.50~dfsg-5ubuntu1","9.50~dfsg-5ubuntu2","9.50~dfsg-5ubuntu3","9.50~dfsg-5ubuntu4","9.50~dfsg-5ubuntu4.1","9.50~dfsg-5ubuntu4.2","9.50~dfsg-5ubuntu4.3","9.50~dfsg-5ubuntu4.4","9.50~dfsg-5ubuntu4.5","9.50~dfsg-5ubuntu4.6","9.50~dfsg-5ubuntu4.7","9.50~dfsg-5ubuntu4.8","9.50~dfsg-5ubuntu4.9","9.50~dfsg-5ubuntu4.10","9.50~dfsg-5ubuntu4.11","9.50~dfsg-5ubuntu4.12","9.50~dfsg-5ubuntu4.13","9.50~dfsg-5ubuntu4.14","9.50~dfsg-5ubuntu4.15"],"bundled":8},{"source":"osv","ecosystem":"Ubuntu:22.04:LTS","package":"ghostscript","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"9.55.0~dfsg1-0ubuntu5.12"}]}],"versions":["9.54.0~dfsg1-0ubuntu2","9.55.0~dfsg1-0ubuntu4","9.55.0~dfsg1-0ubuntu5","9.55.0~dfsg1-0ubuntu5.1","9.55.0~dfsg1-0ubuntu5.2","9.55.0~dfsg1-0ubuntu5.3","9.55.0~dfsg1-0ubuntu5.4","9.55.0~dfsg1-0ubuntu5.5","9.55.0~dfsg1-0ubuntu5.6","9.55.0~dfsg1-0ubuntu5.7","9.55.0~dfsg1-0ubuntu5.9","9.55.0~dfsg1-0ubuntu5.10","9.55.0~dfsg1-0ubuntu5.11"],"bundled":8},{"source":"osv","ecosystem":"Ubuntu:24.04:LTS","package":"ghostscript","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"10.02.1~dfsg1-0ubuntu7.7"}]}],"versions":["10.01.2~dfsg1-0ubuntu2","10.01.2~dfsg1-0ubuntu2.1","10.02.1~dfsg1-0ubuntu1","10.02.1~dfsg1-0ubuntu2","10.02.1~dfsg1-0ubuntu5","10.02.1~dfsg1-0ubuntu6","10.02.1~dfsg1-0ubuntu7","10.02.1~dfsg1-0ubuntu7.1","10.02.1~dfsg1-0ubuntu7.3","10.02.1~dfsg1-0ubuntu7.4","10.02.1~dfsg1-0ubuntu7.5","10.02.1~dfsg1-0ubuntu7.6"],"bundled":8},{"source":"osv","ecosystem":"openSUSE:Tumbleweed","package":"openjpeg2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.5.4-2.1"}]}]},{"source":"osv","ecosystem":"openSUSE:Leap 16.0","package":"openjpeg2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.5.3-160000.3.1"}]}]}],"products":[{"vendor":"red hat","product":"red hat ai inference server 3.2"},{"vendor":"red hat","product":"red hat enterprise linux 6"},{"vendor":"red hat","product":"red hat enterprise linux 7"},{"vendor":"red hat","product":"red hat enterprise linux 8"},{"vendor":"red hat","product":"red hat enterprise linux 9"},{"vendor":"uclouvain","product":"openjpeg"}],"references":[{"url":"https://access.redhat.com/errata/RHSA-2026:4128","tags":["vendor-advisory","x_refsource_REDHAT","advisory","web"]},{"url":"https://access.redhat.com/security/cve/CVE-2023-39327","tags":["vdb-entry","x_refsource_REDHAT","x_transferred","Third Party Advisory","advisory","web"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2295812","tags":["issue-tracking","x_refsource_REDHAT","x_transferred","Issue Tracking","Third Party Advisory","report","web"]},{"url":"https://github.com/uclouvain/openjpeg/issues/1472","tags":["report"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2023-39327","tags":["web","advisory"]},{"url":"https://github.com/advisories/GHSA-f7p4-6cq7-whmw"},{"url":"https://docs.bell-sw.com/security/cves/CVE-2023-39327","tags":["advisory"]},{"url":"https://errata.tuxcare.com/els_os/almalinux9.2esu/CLSA-2026-1786708350.html","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2025-50952","tags":["advisory"]},{"url":"https://errata.tuxcare.com/els_os/tuxcare9.6esu/CLSA-2026-1787149537.html","tags":["advisory"]},{"url":"https://access.redhat.com/downloads/content/package-browser/","tags":["web"]},{"url":"https://catalog.redhat.com/software/containers/","tags":["web"]},{"url":"https://www.openjpeg.org/","tags":["web"]},{"url":"https://github.com/CVEProject/cvelistV5/tree/main/cves/2023/39xxx/CVE-2023-39327.json","tags":["advisory"]},{"url":"https://security-tracker.debian.org/tracker/CVE-2023-39327","tags":["advisory"]},{"url":"https://advisories.mageia.org/MGASA-2024-0323.html","tags":["advisory"]},{"url":"https://bugs.mageia.org/show_bug.cgi?id=33595","tags":["report"]},{"url":"https://ubuntu.com/security/notices/USN-7037-1","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2025/suse-su-20253946-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1227410","tags":["report"]},{"url":"https://bugzilla.suse.com/1250467","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2023-39327","tags":["web"]},{"url":"https://www.suse.com/support/update/announcement/2026/suse-su-20260320-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1227412","tags":["report"]},{"url":"https://www.suse.com/support/update/announcement/2026/suse-su-20260330-1/","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2026/suse-su-202620422-1/","tags":["advisory"]},{"url":"https://ubuntu.com/security/CVE-2023-39327","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2023-39327","tags":["report"]},{"url":"https://ubuntu.com/security/notices/USN-7623-1","tags":["advisory"]},{"url":"https://ubuntu.com/security/CVE-2024-29508","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2024-56826","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2024-56827","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2025-27832","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2025-27835","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2025-27836","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2025-48708","tags":["report"]},{"url":"","tags":["advisory"]}],"sources":{"cve":[{"id":"CVE-2023-39327","title":"Openjpeg: malicious files can cause the program to enter a large loop","description":"A flaw was found in OpenJPEG. Maliciously constructed pictures can cause the program to enter a large loop and continuously print warning messages on the terminal.","status":"published","published":"2024-07-13T03:08:48.501Z","modified":"2026-11-07T11:32:44.072Z","cvss":[{"version":"3.1","score":4.3,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","level":"medium","assessor":"cna"}],"cwes":["CWE-400"],"updated_at":"2026-11-07T12:33:58.237937Z"}],"euvd":[{"id":"EUVD-2023-43058","description":"A flaw was found in OpenJPEG. Maliciously constructed pictures can cause the program to enter a large loop and continuously print warning messages on the terminal.","status":"published","published":"2024-07-13T03:08:48Z","modified":"2026-11-07T11:32:44Z","cvss":[{"version":"3.1","score":4.3,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","level":"medium"}],"updated_at":"2026-11-07T12:09:17.956424Z"}],"ghsa":[{"id":"GHSA-f7p4-6cq7-whmw","title":"A flaw was found in OpenJPEG. Maliciously constructed pictures can cause the program to enter a...","description":"A flaw was found in OpenJPEG. Maliciously constructed pictures can cause the program to enter a large loop and continuously print warning messages on the terminal.","status":"published","published":"2024-07-13T03:30:37Z","modified":"2026-09-21T18:31:33Z","cvss":[{"version":"3.1","score":4.3,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","level":"medium"}],"cwes":["CWE-400"],"updated_at":"2026-11-02T15:12:15.376121Z"}],"nvd":[{"id":"CVE-2023-39327","description":"A flaw was found in OpenJPEG. Maliciously constructed pictures can cause the program to enter a large loop and continuously print warning messages on the terminal.","status":"published","published":"2024-07-13T03:15:09.347Z","modified":"2026-11-07T12:17:30.32Z","cvss":[{"version":"3.1","score":4.3,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","level":"medium","assessor":"secondary"}],"cwes":["CWE-400"],"updated_at":"2026-11-07T14:05:24.982965Z"}],"osv":[{"id":"BELL-CVE-2023-39327","status":"published","published":"2024-07-05T05:57:06.245978Z","modified":"2026-01-26T09:33:33.085158Z","cvss":[{"version":"3.1","score":4.3,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","level":"medium"}],"updated_at":"2026-11-02T15:28:17.742221Z"},{"id":"CVE-2023-39327","title":"Openjpeg: malicious files can cause the program to enter a large loop","description":"A flaw was found in OpenJPEG. Maliciously constructed pictures can cause the program to enter a large loop and continuously print warning messages on the terminal.","status":"published","published":"2024-07-13T03:08:48.501Z","modified":"2026-11-09T02:30:15.943566746Z","cvss":[{"version":"3.1","score":4.3,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","level":"medium"}],"cwes":["CWE-400"],"updated_at":"2026-11-08T02:59:20.776265Z"},{"id":"DEBIAN-CVE-2023-39327","description":"A flaw was found in OpenJPEG. Maliciously constructed pictures can cause the program to enter a large loop and continuously print warning messages on the terminal.","status":"published","published":"2024-07-13T03:15:09.347Z","modified":"2026-11-08T09:47:24.177239459Z","cvss":[{"version":"3.1","score":4.3,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","level":"medium"}],"updated_at":"2026-11-08T10:03:28.621517Z"},{"id":"JLSEC-2026-548","description":"A flaw was found in OpenJPEG. Maliciously constructed pictures can cause the program to enter a large loop and continuously print warning messages on the terminal.","status":"published","published":"2026-05-26T19:31:24.313Z","modified":"2026-07-18T00:00:14.665064597Z","cvss":[{"version":"3.1","score":4.3,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","level":"medium"}],"updated_at":"2026-11-02T15:47:18.573531Z"},{"id":"ROOT-OS-DEBIAN-11-CVE-2023-39327","title":"CVE-2023-39327 in openjpeg2 - Patched by Root","description":"Root has patched CVE-2023-39327 in the openjpeg2 package for Root:Debian:11. Multiple fixed versions available.","status":"withdrawn","published":"2026-08-23T08:15:23Z","modified":"2026-10-09T13:00:05.451733919Z","cvss":[{"version":"3.1","score":4.3,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","level":"medium"}],"updated_at":"2026-11-02T15:53:28.80888Z"},{"id":"ROOT-OS-DEBIAN-13-CVE-2023-39327","title":"CVE-2023-39327 in openjpeg2 - Patched by Root","description":"Root has patched CVE-2023-39327 in the openjpeg2 package for Root:Debian:13. Multiple fixed versions available.","status":"published","published":"2026-08-24T16:24:38Z","modified":"2026-08-24T18:45:21.045358474Z","cvss":[{"version":"3.1","score":4.3,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","level":"medium"}],"updated_at":"2026-11-02T15:53:32.570806Z"},{"id":"UBUNTU-CVE-2023-39327","description":"A flaw was found in OpenJPEG. Maliciously constructed pictures can cause the program to enter a large loop and continuously print warning messages on the terminal.","status":"published","published":"2024-07-13T03:15:00Z","modified":"2026-10-17T12:56:25.730278279Z","cvss":[{"version":"3.1","score":4.3,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","level":"medium"}],"updated_at":"2026-11-02T16:54:21.882004Z"},{"id":"AZL-73323","title":"CVE-2023-39327 affecting package openjpeg2 2.3.1-12","description":"A flaw was found in OpenJPEG. Maliciously constructed pictures can cause the program to enter a large loop and continuously print warning messages on the terminal.","status":"published","published":"2024-07-13T03:15:09Z","modified":"2026-11-05T05:36:30Z","updated_at":"2026-11-05T16:41:24.309973Z"},{"id":"AZL-73362","title":"CVE-2023-39327 affecting package openjpeg2 2.3.1-12","description":"A flaw was found in OpenJPEG. Maliciously constructed pictures can cause the program to enter a large loop and continuously print warning messages on the terminal.","status":"published","published":"2024-07-13T03:15:09Z","modified":"2026-04-21T04:33:52.168469Z","updated_at":"2026-11-02T15:28:09.201912Z"},{"id":"CLSA-2026-1786708350","title":"openjpeg2: Fix of 2 CVEs","description":"- CVE-2025-50952: fix NULL pointer dereference in opj_dwt_decode_tile()\n- CVE-2023-39327: fix uncontrolled resource consumption when EPH markers are declared but missing","status":"published","published":"2026-08-14T11:52:40Z","modified":"2026-10-26T09:43:59.76652174Z","updated_at":"2026-11-02T15:43:47.20725Z"},{"id":"CLSA-2026-1787149537","title":"openjpeg2: Fix of 2 CVEs","description":"- CVE-2025-50952: fix NULL pointer dereference in opj_dwt_decode_tile()\n- CVE-2023-39327: fix uncontrolled resource consumption when EPH markers are declared but missing","status":"published","published":"2026-08-19T14:51:12Z","modified":"2026-10-26T09:43:29.27992204Z","updated_at":"2026-11-02T15:43:47.20725Z"},{"id":"MGASA-2024-0323","title":"Updated openjpeg2 packages fix security vulnerability","description":"Maliciously constructed pictures can cause the program to enter a large\nloop and continuously print warning messages on the terminal.\n(CVE-2023-39327)\n","status":"published","published":"2024-10-04T05:27:04Z","modified":"2026-04-16T04:43:42.425726489Z","updated_at":"2026-11-02T15:49:42.684501Z"},{"id":"openSUSE-SU-2026:10095-1","title":"libopenjp2-7-2.5.4-2.1 on GA media","description":"These are all security issues fixed in the libopenjp2-7-2.5.4-2.1 package on the GA media of openSUSE Tumbleweed.","status":"published","published":"2026-01-26T00:00:00Z","modified":"2026-03-23T04:54:26.949277Z","updated_at":"2026-11-02T16:58:38.101535Z"},{"id":"openSUSE-SU-2026:20203-1","title":"Security update for openjpeg2","description":"This update for openjpeg2 fixes the following issues:\n\n- CVE-2023-39327: Fixed malicious files can cause a large loop that continuously prints warning messages on the terminal (bsc#1227412).\n","status":"published","published":"2026-02-11T19:15:23Z","modified":"2026-03-23T04:54:47.342886Z","updated_at":"2026-11-02T16:58:41.463445Z"},{"id":"SUSE-SU-2025:3946-1","title":"Security update for openjpeg","description":"This update for openjpeg fixes the following issues:\n\n- CVE-2023-39327: Fixed that malicious files can cause a large loop that continuously prints warning messages on the terminal (bsc#1227410).\n\nOther bug fixes:\n\n- Ensure no bundled libraries are used (bsc#1250467).\n","status":"published","published":"2025-11-05T08:17:14Z","modified":"2026-03-23T04:51:21.690144Z","updated_at":"2026-11-02T15:54:00.344164Z"},{"id":"SUSE-SU-2026:0320-1","title":"Security update for openjpeg2","description":"This update for openjpeg2 fixes the following issues:\n\n- CVE-2023-39327: Fixed malicious files can cause a large loop that continuously prints warning messages on the terminal (bsc#1227412).\n","status":"published","published":"2026-01-28T14:40:09Z","modified":"2026-03-23T04:52:08.118011Z","updated_at":"2026-11-02T15:54:00.846737Z"},{"id":"SUSE-SU-2026:0330-1","title":"Security update for openjpeg2","description":"This update for openjpeg2 fixes the following issues:\n\n- CVE-2023-39327: Fixed malicious files can cause a large loop that continuously prints warning messages on the terminal (bsc#1227412).\n","status":"published","published":"2026-01-28T16:27:12Z","modified":"2026-03-23T04:50:24.49006Z","updated_at":"2026-11-02T15:54:00.846737Z"},{"id":"SUSE-SU-2026:20422-1","title":"Security update for openjpeg2","description":"This update for openjpeg2 fixes the following issues:\n\n- CVE-2023-39327: Fixed malicious files can cause a large loop that continuously prints warning messages on the terminal (bsc#1227412).\n","status":"published","published":"2026-02-11T19:16:36Z","modified":"2026-03-23T04:52:53.608415Z","updated_at":"2026-11-02T15:54:01.953589Z"},{"id":"USN-7037-1","title":"openjpeg2 vulnerability","description":"It was discovered that OpenJPEG could enter a large loop and continuously\nprint warning messages when given specially crafted input. An attacker\ncould potentially use this issue to cause a denial of service.\n","status":"published","published":"2024-09-26T06:38:27Z","modified":"2026-06-25T13:32:28.963940907Z","updated_at":"2026-11-02T16:58:18.876384Z"},{"id":"USN-7623-1","title":"ghostscript vulnerabilities","description":"It was discovered that OpenJPEG, vendored in Ghostscript did not correctly\nhandle large image files. If a user or system were tricked into opening a\nspecially crafted file, an attacker could possibly use this issue to cause\na denial of service. This issue only affected Ubuntu 16.04 LTS and Ubuntu\n18.04 LTS. (CVE-2023-39327)  Thomas Rinsma discovered that Ghostscript did\nnot correctly handle printing certain variables. An attacker could possibly\nuse this issue to leak sensitive information. This issue only affected\nUbuntu 16.04 LTS and Ubuntu 18.04 LTS. (CVE-2024-29508)  It was discovered\nthat Ghostscript did not correctly handle loading certain libraries. An\nattacker could possibly use this issue to execute arbitrary code. This\nissue only affected Ubuntu 16.04 LTS. (CVE-2024-33871)  It was discovered\nthat Ghostscript did not correctly handle certain memory operations. An\nattacker could possibly use this issue to execute arbitrary code. This\nissue only affected Ubuntu 16.04 LTS and Ubuntu 18.04 LTS. (CVE-2024-56826,\nCVE-2024-56827, CVE-2025-27832, CVE-2025-27835, CVE-2025-27836)  Vasileios\nFlengas discovered that Ghostscript did not correctly handle argument\nsanitization. An attacker could possibly use this issue to leak sensitive\ninformation. This issue only affected Ubuntu 20.04 LTS, Ubuntu 22.04 LTS,\nUbuntu 24.04 LTS, Ubuntu 24.10 and Ubuntu 25.04. (CVE-2025-48708)","status":"published","published":"2025-07-08T03:48:52Z","modified":"2026-06-25T13:32:30.535129232Z","updated_at":"2026-11-02T16:58:19.988474Z"}]}}