{"id":"CVE-2023-39328","aliases":["AZL-43657","AZL-44982","BELL-CVE-2023-39328","DEBIAN-CVE-2023-39328","EUVD-2023-43059","GHSA-hc4f-jc7g-w997","JLSEC-2026-549","OESA-2024-1846","ROOT-OS-DEBIAN-11-CVE-2023-39328","ROOT-OS-DEBIAN-12-CVE-2023-39328","ROOT-OS-DEBIAN-13-CVE-2023-39328","ROOT-OS-UBUNTU-2404-CVE-2023-39328","UBUNTU-CVE-2023-39328"],"status":"published","title":"Openjpeg: denail of service via crafted image file","description":"A vulnerability was found in OpenJPEG similar to CVE-2019-6988. This flaw allows an attacker to bypass existing protections and cause an application crash through a maliciously crafted file.","severity":{"version":"3.1","score":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","level":"medium","assessor":"cna","from":"cve"},"epss":{"day":"2026-11-10","score":0.00242,"percentile":0.15521,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":true},"cwes":["CWE-400"],"published":"2024-07-05T05:57:06.365944Z","modified":"2026-11-05T05:36:30Z","fixes":[{"ecosystem":"Julia","package":"OpenJpeg_jll","fixed_in":["2.5.2+0"],"sources":["osv"]},{"ecosystem":"openEuler:22.03-LTS-SP4","package":"openjpeg2","fixed_in":["2.5.0-3.oe2203sp4"],"sources":["osv"]},{"ecosystem":"openEuler:22.03-LTS-SP1","package":"openjpeg2","fixed_in":["2.5.0-3.oe2203sp1"],"sources":["osv"]},{"ecosystem":"openEuler:22.03-LTS-SP3","package":"openjpeg2","fixed_in":["2.5.0-3.oe2203sp3"],"sources":["osv"]},{"ecosystem":"openEuler:20.03-LTS-SP4","package":"openjpeg2","fixed_in":["2.3.1-12.oe2003sp4"],"sources":["osv"]},{"ecosystem":"openEuler:24.03-LTS","package":"openjpeg2","fixed_in":["2.5.0-4.oe2403"],"sources":["osv"]},{"ecosystem":"Root:Debian:11","package":"openjpeg2","fixed_in":["2.4.0-3+deb11u3.aikido.10"],"sources":["osv"]},{"ecosystem":"Root:Debian:11","package":"rootio-openjpeg2","fixed_in":["2.4.0-3+deb11u3.aikido.10"],"sources":["osv"]},{"ecosystem":"Root:Debian:12","package":"openjpeg2","fixed_in":["2.5.0-2+deb12u2.root.io.13","2.5.0-2+deb12u2.root.io.10","2.5.0-2+deb12u2.root.io.12","2.5.0-2+deb12u2.root.io.11","2.5.0-2+deb12u2.root.io.14","2.5.0-2+deb12u2.root.io.9","2.5.0-2+deb12u2.root.io.15","2.5.0-2+deb12u2.root.io.16","2.5.0-2+deb12u3.aikido.17"],"sources":["osv"]},{"ecosystem":"Root:Debian:12","package":"rootio-openjpeg2","fixed_in":["2.5.0-2+deb12u2.root.io.13","2.5.0-2+deb12u2.root.io.10","2.5.0-2+deb12u2.root.io.12","2.5.0-2+deb12u2.root.io.11","2.5.0-2+deb12u2.root.io.14","2.5.0-2+deb12u2.root.io.9","2.5.0-2+deb12u2.root.io.15","2.5.0-2+deb12u2.root.io.16","2.5.0-2+deb12u3.aikido.17"],"sources":["osv"]},{"ecosystem":"Root:Debian:13","package":"openjpeg2","fixed_in":["2.5.3-2.1~deb13u2.aikido.6","2.5.3-2.1~deb13u2.root.io.5"],"sources":["osv"]},{"ecosystem":"Root:Debian:13","package":"rootio-openjpeg2","fixed_in":["2.5.3-2.1~deb13u2.aikido.6","2.5.3-2.1~deb13u2.root.io.5"],"sources":["osv"]},{"ecosystem":"Root:Ubuntu:24.04","package":"openjpeg2","fixed_in":["2.5.0-2ubuntu0.5.aikido.5"],"sources":["osv"]},{"ecosystem":"Root:Ubuntu:24.04","package":"rootio-openjpeg2","fixed_in":["2.5.0-2ubuntu0.5.aikido.5"],"sources":["osv"]}],"affected":[{"source":"osv","ecosystem":"Azure Linux:2","package":"openjpeg2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"last_affected":"2.3.1-12"}]}]},{"source":"osv","ecosystem":"Azure Linux:3","package":"openjpeg2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"last_affected":"2.3.1-12"}]}]},{"source":"osv","ecosystem":"Alpaquita:23","package":"openjpeg","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"2.5.0-r0"}]}]},{"source":"osv","ecosystem":"Alpaquita:stream","package":"openjpeg","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"2.5.0-r0"}]}]},{"source":"osv","ecosystem":"Debian:12","package":"openjpeg2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["2.5.0-2","2.5.0-2+deb12u1","2.5.0-2+deb12u2","2.5.0-2+deb12u3","2.5.3-1","2.5.3-1~exp1","2.5.3-1~exp2","2.5.3-2","2.5.3-2.1","2.5.3-2.1~deb13u1","2.5.3-2.1~deb13u2","2.5.4-1","2.5.4-1.1"]},{"source":"osv","ecosystem":"Debian:13","package":"openjpeg2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["2.5.3-2","2.5.3-2.1","2.5.3-2.1~deb13u1","2.5.3-2.1~deb13u2","2.5.4-1","2.5.4-1.1"]},{"source":"osv","ecosystem":"Debian:14","package":"openjpeg2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["2.5.3-2","2.5.3-2.1","2.5.3-2.1~deb13u1","2.5.3-2.1~deb13u2","2.5.4-1","2.5.4-1.1"]},{"source":"osv","ecosystem":"Julia","package":"OpenJpeg_jll","ranges":[{"type":"SEMVER","events":[{"introduced":"2.5.0+0"},{"fixed":"2.5.2+0"}]}]},{"source":"osv","ecosystem":"openEuler:22.03-LTS-SP4","package":"openjpeg2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.5.0-3.oe2203sp4"}]}]},{"source":"osv","ecosystem":"openEuler:22.03-LTS-SP1","package":"openjpeg2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.5.0-3.oe2203sp1"}]}]},{"source":"osv","ecosystem":"openEuler:22.03-LTS-SP3","package":"openjpeg2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.5.0-3.oe2203sp3"}]}]},{"source":"osv","ecosystem":"openEuler:20.03-LTS-SP4","package":"openjpeg2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.3.1-12.oe2003sp4"}]}]},{"source":"osv","ecosystem":"openEuler:24.03-LTS","package":"openjpeg2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.5.0-4.oe2403"}]}]},{"source":"osv","ecosystem":"Root:Debian:11","package":"openjpeg2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.0-3+deb11u3.aikido.10"}]}]},{"source":"osv","ecosystem":"Root:Debian:11","package":"rootio-openjpeg2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.0-3+deb11u3.aikido.10"}]}]},{"source":"osv","ecosystem":"Root:Debian:12","package":"openjpeg2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.5.0-2+deb12u2.root.io.13"},{"fixed":"2.5.0-2+deb12u2.root.io.10"},{"fixed":"2.5.0-2+deb12u2.root.io.12"},{"fixed":"2.5.0-2+deb12u2.root.io.11"},{"fixed":"2.5.0-2+deb12u2.root.io.14"},{"fixed":"2.5.0-2+deb12u2.root.io.9"},{"fixed":"2.5.0-2+deb12u2.root.io.15"},{"fixed":"2.5.0-2+deb12u2.root.io.16"},{"fixed":"2.5.0-2+deb12u3.aikido.17"}]}]},{"source":"osv","ecosystem":"Root:Debian:12","package":"rootio-openjpeg2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.5.0-2+deb12u2.root.io.13"},{"fixed":"2.5.0-2+deb12u2.root.io.10"},{"fixed":"2.5.0-2+deb12u2.root.io.12"},{"fixed":"2.5.0-2+deb12u2.root.io.11"},{"fixed":"2.5.0-2+deb12u2.root.io.14"},{"fixed":"2.5.0-2+deb12u2.root.io.9"},{"fixed":"2.5.0-2+deb12u2.root.io.15"},{"fixed":"2.5.0-2+deb12u2.root.io.16"},{"fixed":"2.5.0-2+deb12u3.aikido.17"}]}]},{"source":"osv","ecosystem":"Root:Debian:13","package":"openjpeg2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.5.3-2.1~deb13u2.aikido.6"},{"fixed":"2.5.3-2.1~deb13u2.root.io.5"}]}]},{"source":"osv","ecosystem":"Root:Debian:13","package":"rootio-openjpeg2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.5.3-2.1~deb13u2.aikido.6"},{"fixed":"2.5.3-2.1~deb13u2.root.io.5"}]}]},{"source":"osv","ecosystem":"Root:Ubuntu:24.04","package":"openjpeg2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.5.0-2ubuntu0.5.aikido.5"}]}]},{"source":"osv","ecosystem":"Root:Ubuntu:24.04","package":"rootio-openjpeg2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.5.0-2ubuntu0.5.aikido.5"}]}]},{"source":"osv","ecosystem":"Ubuntu:14.04:LTS","package":"openjpeg","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["1.3+dfsg-4.6ubuntu2","1.3+dfsg-4.7ubuntu1"]},{"source":"osv","ecosystem":"Ubuntu:Pro:16.04:LTS","package":"ghostscript","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["9.16~dfsg~0-0ubuntu3","9.16~dfsg~0-0ubuntu4","9.18~dfsg~0-0ubuntu1","9.18~dfsg~0-0ubuntu2","9.18~dfsg~0-0ubuntu2.2","9.18~dfsg~0-0ubuntu2.3","9.18~dfsg~0-0ubuntu2.4","9.18~dfsg~0-0ubuntu2.6","9.18~dfsg~0-0ubuntu2.7","9.18~dfsg~0-0ubuntu2.8","9.18~dfsg~0-0ubuntu2.9","9.25~dfsg+1-0ubuntu0.16.04.1","9.25~dfsg+1-0ubuntu0.16.04.2","9.25~dfsg+1-0ubuntu0.16.04.3","9.26~dfsg+0-0ubuntu0.16.04.1","9.26~dfsg+0-0ubuntu0.16.04.3","9.26~dfsg+0-0ubuntu0.16.04.4","9.26~dfsg+0-0ubuntu0.16.04.5","9.26~dfsg+0-0ubuntu0.16.04.6","9.26~dfsg+0-0ubuntu0.16.04.7","9.26~dfsg+0-0ubuntu0.16.04.8","9.26~dfsg+0-0ubuntu0.16.04.9","9.26~dfsg+0-0ubuntu0.16.04.10","9.26~dfsg+0-0ubuntu0.16.04.11","9.26~dfsg+0-0ubuntu0.16.04.12","9.26~dfsg+0-0ubuntu0.16.04.13","9.26~dfsg+0-0ubuntu0.16.04.14","9.26~dfsg+0-0ubuntu0.16.04.14+esm1","9.26~dfsg+0-0ubuntu0.16.04.14+esm2","9.26~dfsg+0-0ubuntu0.16.04.14+esm3","9.26~dfsg+0-0ubuntu0.16.04.14+esm4","9.26~dfsg+0-0ubuntu0.16.04.14+esm5","9.26~dfsg+0-0ubuntu0.16.04.14+esm6","9.26~dfsg+0-0ubuntu0.16.04.14+esm7","9.26~dfsg+0-0ubuntu0.16.04.14+esm8","9.26~dfsg+0-0ubuntu0.16.04.14+esm9","9.26~dfsg+0-0ubuntu0.16.04.14+esm10","9.26~dfsg+0-0ubuntu0.16.04.14+esm11"]},{"source":"osv","ecosystem":"Ubuntu:16.04:LTS","package":"blender","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["2.74+dfsg0-4build2","2.75.a+dfsg0-2ubuntu2","2.75.a+dfsg0-2ubuntu3","2.76.b+dfsg0-3","2.76.b+dfsg0-3build1"]},{"source":"osv","ecosystem":"Ubuntu:16.04:LTS","package":"insighttoolkit4","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["4.8.1-1ubuntu3","4.8.1-1ubuntu4","4.8.2-3.1ubuntu1","4.9.0-3ubuntu2","4.9.0-4ubuntu1","4.9.0-4ubuntu1.1"]},{"source":"osv","ecosystem":"Ubuntu:Pro:16.04:LTS","package":"openjpeg","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["1:1.5.2-3.1","1:1.5.2-3.1ubuntu0.1~esm2"]},{"source":"osv","ecosystem":"Ubuntu:Pro:16.04:LTS","package":"openjpeg2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["2.1.0-2.1","2.1.0-2.1ubuntu0.1","2.1.2-1.1+deb9u2build0.1","2.1.2-1.1+deb9u3build0.16.04.1","2.1.2-1.1+deb9u3ubuntu0.1~esm1","2.1.2-1.1+deb9u5build0.16.04.1","2.1.2-1.1+deb9u5ubuntu0.1~esm1","2.1.2-1.1+deb9u6build0.16.04.1","2.1.2-1.1+deb9u6ubuntu0.1~esm1","2.1.2-1.1+deb9u6ubuntu0.1~esm3","2.1.2-1.1+deb9u6ubuntu0.1~esm4","2.1.2-1.1+deb9u6ubuntu0.1~esm6","2.1.2-1.1+deb9u6ubuntu0.1~esm7"]},{"source":"osv","ecosystem":"Ubuntu:16.04:LTS","package":"texmaker","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["4.4.1-1","4.4.1-1.1"]},{"source":"osv","ecosystem":"Ubuntu:Pro:18.04:LTS","package":"ghostscript","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["9.21~dfsg+1-0ubuntu3","9.22~dfsg+1-0ubuntu1","9.22~dfsg+1-0ubuntu1.1","9.22~dfsg+1-0ubuntu1.2","9.25~dfsg+1-0ubuntu0.18.04.1","9.25~dfsg+1-0ubuntu0.18.04.2","9.26~dfsg+0-0ubuntu0.18.04.1","9.26~dfsg+0-0ubuntu0.18.04.3","9.26~dfsg+0-0ubuntu0.18.04.4","9.26~dfsg+0-0ubuntu0.18.04.5","9.26~dfsg+0-0ubuntu0.18.04.6","9.26~dfsg+0-0ubuntu0.18.04.7","9.26~dfsg+0-0ubuntu0.18.04.8","9.26~dfsg+0-0ubuntu0.18.04.9","9.26~dfsg+0-0ubuntu0.18.04.10","9.26~dfsg+0-0ubuntu0.18.04.11","9.26~dfsg+0-0ubuntu0.18.04.12","9.26~dfsg+0-0ubuntu0.18.04.13","9.26~dfsg+0-0ubuntu0.18.04.14","9.26~dfsg+0-0ubuntu0.18.04.15","9.26~dfsg+0-0ubuntu0.18.04.16","9.26~dfsg+0-0ubuntu0.18.04.17","9.26~dfsg+0-0ubuntu0.18.04.18","9.26~dfsg+0-0ubuntu0.18.04.18+esm1","9.26~dfsg+0-0ubuntu0.18.04.18+esm2","9.26~dfsg+0-0ubuntu0.18.04.18+esm3","9.26~dfsg+0-0ubuntu0.18.04.18+esm4","9.26~dfsg+0-0ubuntu0.18.04.18+esm5","9.26~dfsg+0-0ubuntu0.18.04.18+esm6"]},{"source":"osv","ecosystem":"Ubuntu:18.04:LTS","package":"blender","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["2.78.c+dfsg0-2build1","2.79+dfsg0-2build1","2.79+dfsg0-3","2.79+dfsg0-3build1","2.79.b+dfsg0-1","2.79.b+dfsg0-1ubuntu1.18.04.1"]},{"source":"osv","ecosystem":"Ubuntu:18.04:LTS","package":"insighttoolkit4","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["4.12.2-dfsg1-1ubuntu1"]},{"source":"osv","ecosystem":"Ubuntu:Pro:18.04:LTS","package":"openjpeg2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["2.2.0-1","2.3.0-1","2.3.0-2build0.18.04.1","2.3.0-2ubuntu0.1~esm1","2.3.0-2+deb10u2build0.18.04.1","2.3.0-2+deb10u2ubuntu0.1~esm1","2.3.0-2+deb10u2ubuntu0.1~esm2","2.3.0-2+deb10u2ubuntu0.1~esm3","2.3.0-2+deb10u2ubuntu0.1~esm4","2.3.0-2+deb10u2ubuntu0.1~esm5"]},{"source":"osv","ecosystem":"Ubuntu:Pro:18.04:LTS","package":"qtwebengine-opensource-src","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["5.9.1+dfsg-4","5.9.1+dfsg-4ubuntu1","5.9.2+dfsg-2ubuntu1","5.9.3+dfsg-0ubuntu1","5.9.4+dfsg-0ubuntu1","5.9.5+dfsg-0ubuntu2","5.9.5+dfsg-0ubuntu2+esm1"]},{"source":"osv","ecosystem":"Ubuntu:Pro:18.04:LTS","package":"texmaker","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["4.5-1","5.0.2-1","5.0.2-1build1","5.0.2-1build2","5.0.2-1ubuntu0.1~esm1"]},{"source":"osv","ecosystem":"Ubuntu:Pro:20.04:LTS","package":"openjpeg2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["2.3.0-2","2.3.0-2build1","2.3.1-1","2.3.1-1ubuntu3","2.3.1-1ubuntu4","2.3.1-1ubuntu4.20.04.1","2.3.1-1ubuntu4.20.04.2","2.3.1-1ubuntu4.20.04.3","2.3.1-1ubuntu4.20.04.4","2.3.1-1ubuntu4.20.04.4+esm1"]},{"source":"osv","ecosystem":"Ubuntu:20.04:LTS","package":"blender","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["2.80+dfsg-3","2.80+dfsg-3build1","2.80+dfsg-4","2.81.a+dfsg-5build3","2.82+dfsg-1","2.82+dfsg-1build1","2.82.a+dfsg-1"]},{"source":"osv","ecosystem":"Ubuntu:20.04:LTS","package":"insighttoolkit4","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["4.12.2-dfsg1-4.1ubuntu1","4.13.2-dfsg1-1ubuntu1","4.13.2-dfsg1-4ubuntu1","4.13.2-dfsg1-6","4.13.2-dfsg1-6ubuntu1","4.13.2-dfsg1-8"]},{"source":"osv","ecosystem":"Ubuntu:Pro:20.04:LTS","package":"qtwebengine-opensource-src","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["5.12.4+dfsg-1ubuntu1","5.12.4+dfsg-1ubuntu3","5.12.5+dfsg-3ubuntu1","5.12.5+dfsg-6ubuntu2","5.12.5+dfsg-7","5.12.5+dfsg-7build1","5.12.8+dfsg-0ubuntu1","5.12.8+dfsg-0ubuntu1.1","5.12.8+dfsg-0ubuntu1.1+esm1"]},{"source":"osv","ecosystem":"Ubuntu:Pro:20.04:LTS","package":"texmaker","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["5.0.3-1build2","5.0.3-1build3","5.0.3-1build4","5.0.3-1build5","5.0.3-1ubuntu0.20.04.1~esm1"]},{"source":"osv","ecosystem":"Ubuntu:22.04:LTS","package":"blender","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["2.93.3+dfsg-3","2.93.5+dfsg-1","2.93.5+dfsg-1build1","3.0.1+dfsg-7"]},{"source":"osv","ecosystem":"Ubuntu:22.04:LTS","package":"insighttoolkit4","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["4.13.3withdata-dfsg1-4.1","4.13.3withdata-dfsg2-1ubuntu1"]},{"source":"osv","ecosystem":"Ubuntu:22.04:LTS","package":"openjpeg2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["2.3.1-1ubuntu5","2.3.1-1ubuntu6","2.4.0-3","2.4.0-5","2.4.0-6","2.4.0-6ubuntu0.1","2.4.0-6ubuntu0.2","2.4.0-6ubuntu0.3","2.4.0-6ubuntu0.4","2.4.0-6ubuntu0.5"]},{"source":"osv","ecosystem":"Ubuntu:Pro:22.04:LTS","package":"qtwebengine-opensource-src","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["5.15.6+dfsg-1","5.15.6+dfsg-2","5.15.7+dfsg-2","5.15.8+dfsg-1","5.15.8+dfsg-1build1","5.15.8+dfsg-1build2","5.15.8+dfsg-2","5.15.9+dfsg-1","5.15.9+dfsg-1ubuntu0.1~esm1"]},{"source":"osv","ecosystem":"Ubuntu:Pro:22.04:LTS","package":"texmaker","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["5.0.3-1build8","5.0.3-1build9","5.0.3-1ubuntu0.22.04.1~esm1"]},{"source":"osv","ecosystem":"Ubuntu:24.04:LTS","package":"blender","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["3.6.2+dfsg-2ubuntu1","3.6.2+dfsg-2ubuntu2","4.0.2+dfsg-1ubuntu1","4.0.2+dfsg-1ubuntu2","4.0.2+dfsg-1ubuntu4","4.0.2+dfsg-1ubuntu6","4.0.2+dfsg-1ubuntu7","4.0.2+dfsg-1ubuntu8"]},{"source":"osv","ecosystem":"Ubuntu:24.04:LTS","package":"openjpeg2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["2.5.0-2","2.5.0-2build2","2.5.0-2build3","2.5.0-2ubuntu0.1","2.5.0-2ubuntu0.2","2.5.0-2ubuntu0.3","2.5.0-2ubuntu0.4","2.5.0-2ubuntu0.5"]},{"source":"osv","ecosystem":"Ubuntu:Pro:24.04:LTS","package":"qtwebengine-opensource-src","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["5.15.15+dfsg-2","5.15.15+dfsg-2build2","5.15.15+dfsg-2ubuntu1","5.15.16+dfsg-1","5.15.16+dfsg-1ubuntu2","5.15.16+dfsg-1ubuntu4","5.15.16+dfsg-3","5.15.16+dfsg-3ubuntu0.1~esm1"]},{"source":"osv","ecosystem":"Ubuntu:Pro:24.04:LTS","package":"texmaker","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["5.1.3+dfsg-1build4","5.1.3+dfsg-1build5","5.1.3+dfsg-1build6","5.1.3+dfsg-1build7","5.1.3+dfsg-1build8","5.1.3+dfsg-1ubuntu0.1~esm1"]},{"source":"osv","ecosystem":"Ubuntu:25.10","package":"blender","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["4.3.2+dfsg-2","4.3.2+dfsg-2ubuntu1","4.3.2+dfsg-2ubuntu2"]},{"source":"osv","ecosystem":"Ubuntu:25.10","package":"openjpeg2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["2.5.3-2","2.5.3-2.1","2.5.3-2.1ubuntu0.1"]},{"source":"osv","ecosystem":"Ubuntu:25.10","package":"qtwebengine-opensource-src","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["5.15.18+dfsg-2","5.15.18+dfsg-2build1","5.15.19+dfsg-1","5.15.19+dfsg2-1"]},{"source":"osv","ecosystem":"Ubuntu:25.10","package":"texmaker","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["5.1.3+dfsg-3","5.1.3+dfsg-3build1"]},{"source":"osv","ecosystem":"Ubuntu:26.10","package":"blender","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["5.0.1+dfsg-1ubuntu1","5.0.1+dfsg-1ubuntu3","5.0.1+dfsg-3build1","5.0.1+dfsg-5"]},{"source":"osv","ecosystem":"Ubuntu:26.10","package":"openjpeg2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["2.5.4-1","2.5.4-1ubuntu0.1","2.5.4-1.1"]},{"source":"osv","ecosystem":"Ubuntu:26.10","package":"qtwebengine-opensource-src","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["5.15.19+dfsg2-4","5.15.19+dfsg2-6","5.15.19+dfsg2-7"]},{"source":"osv","ecosystem":"Ubuntu:26.10","package":"texmaker","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["6.0.1+dfsg-3build1","6.0.1+dfsg-3build2"]},{"source":"osv","ecosystem":"Ubuntu:26.04:LTS","package":"blender","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["4.3.2+dfsg-2ubuntu2","5.0.1+dfsg-1ubuntu1"]},{"source":"osv","ecosystem":"Ubuntu:26.04:LTS","package":"openjpeg2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["2.5.3-2.1","2.5.4-1","2.5.4-1ubuntu0.1"]},{"source":"osv","ecosystem":"Ubuntu:26.04:LTS","package":"texmaker","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["5.1.3+dfsg-3build1","6.0.1+dfsg-3","6.0.1+dfsg-3build1"]},{"source":"osv","ecosystem":"Ubuntu:Pro:26.04:LTS","package":"qtwebengine-opensource-src","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["5.15.19+dfsg2-1","5.15.19+dfsg2-1build1","5.15.19+dfsg2-2","5.15.19+dfsg2-3","5.15.19+dfsg2-4","5.15.19+dfsg2-4ubuntu0.1~esm1"]}],"products":[{"vendor":"red hat","product":"red hat enterprise linux 6"},{"vendor":"red hat","product":"red hat enterprise linux 7"},{"vendor":"red hat","product":"red hat enterprise linux 8"},{"vendor":"red hat","product":"red hat enterprise linux 9"},{"vendor":"uclouvain","product":"openjpeg"}],"references":[{"url":"https://access.redhat.com/security/cve/CVE-2023-39328","tags":["vdb-entry","x_refsource_REDHAT","x_transferred","Third Party Advisory","advisory","web","report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2219236","tags":["issue-tracking","x_refsource_REDHAT","x_transferred","Issue Tracking","Third Party Advisory","report","web"]},{"url":"https://github.com/uclouvain/openjpeg/issues/1476","tags":["report","web"]},{"url":"https://github.com/uclouvain/openjpeg/pull/1470","tags":["fix","web","report"]},{"url":"https://github.com/uclouvain/openjpeg/pull/1471","tags":["fix","web"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2023-39328","tags":["web","advisory"]},{"url":"https://github.com/advisories/GHSA-hc4f-jc7g-w997"},{"url":"https://docs.bell-sw.com/security/cves/CVE-2023-39328","tags":["advisory"]},{"url":"https://access.redhat.com/downloads/content/package-browser/","tags":["web"]},{"url":"https://www.openjpeg.org/","tags":["web"]},{"url":"https://github.com/CVEProject/cvelistV5/tree/main/cves/2023/39xxx/CVE-2023-39328.json","tags":["advisory"]},{"url":"https://security-tracker.debian.org/tracker/CVE-2023-39328","tags":["advisory"]},{"url":"https://www.openeuler.org/zh/security/security-bulletins/detail/?id=openEuler-SA-2024-1846","tags":["advisory"]},{"url":"https://ubuntu.com/security/CVE-2023-39328","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2023-39328","tags":["report"]}],"sources":{"cve":[{"id":"CVE-2023-39328","title":"Openjpeg: denail of service via crafted image file","description":"A vulnerability was found in OpenJPEG similar to CVE-2019-6988. This flaw allows an attacker to bypass existing protections and cause an application crash through a maliciously crafted file.","status":"published","published":"2024-07-09T13:53:07.111Z","modified":"2026-11-07T05:01:49.249Z","cvss":[{"version":"3.1","score":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","level":"medium","assessor":"cna"}],"cwes":["CWE-400"],"updated_at":"2026-11-07T05:32:42.683254Z"}],"euvd":[{"id":"EUVD-2023-43059","description":"A vulnerability was found in OpenJPEG similar to CVE-2019-6988. This flaw allows an attacker to bypass existing protections and cause an application crash through a maliciously crafted file.","status":"published","published":"2024-07-09T13:53:07Z","modified":"2026-11-07T05:01:49Z","cvss":[{"version":"3.1","score":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","level":"medium"}],"updated_at":"2026-11-07T06:08:30.731226Z"}],"ghsa":[{"id":"GHSA-hc4f-jc7g-w997","title":"A vulnerability was found in OpenJPEG similar to CVE-2019-6988. This flaw allows an attacker to...","description":"A vulnerability was found in OpenJPEG similar to CVE-2019-6988. This flaw allows an attacker to bypass existing protections and cause an application crash through a maliciously crafted file.","status":"published","published":"2024-07-09T15:30:53Z","modified":"2026-06-26T12:31:33Z","cvss":[{"version":"3.1","score":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","level":"medium"}],"cwes":["CWE-400"],"updated_at":"2026-11-02T15:09:00.559973Z"}],"nvd":[{"id":"CVE-2023-39328","description":"A vulnerability was found in OpenJPEG similar to CVE-2019-6988. This flaw allows an attacker to bypass existing protections and cause an application crash through a maliciously crafted file.","status":"published","published":"2024-07-09T14:15:03.4Z","modified":"2026-11-07T05:17:40.937Z","cvss":[{"version":"3.1","score":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","level":"medium","assessor":"secondary"}],"cwes":["CWE-400"],"updated_at":"2026-11-07T07:04:19.877179Z"}],"osv":[{"id":"BELL-CVE-2023-39328","status":"published","published":"2024-07-05T05:57:06.365944Z","modified":"2026-01-26T09:33:33.724644Z","cvss":[{"version":"3.1","score":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","level":"medium"}],"updated_at":"2026-11-02T15:28:17.742221Z"},{"id":"CVE-2023-39328","title":"Openjpeg: denail of service via crafted image file","description":"A vulnerability was found in OpenJPEG similar to CVE-2019-6988. This flaw allows an attacker to bypass existing protections and cause an application crash through a maliciously crafted file.","status":"published","published":"2024-07-09T13:53:07.111Z","modified":"2026-11-08T02:30:20.337049556Z","cvss":[{"version":"3.1","score":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","level":"medium"}],"cwes":["CWE-400"],"updated_at":"2026-11-08T02:59:18.786251Z"},{"id":"DEBIAN-CVE-2023-39328","description":"A vulnerability was found in OpenJPEG similar to CVE-2019-6988. This flaw allows an attacker to bypass existing protections and cause an application crash through a maliciously crafted file.","status":"published","published":"2024-07-09T14:15:03.4Z","modified":"2026-11-07T09:47:31.157775041Z","cvss":[{"version":"3.1","score":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","level":"medium"}],"updated_at":"2026-11-07T10:14:39.995311Z"},{"id":"JLSEC-2026-549","description":"A vulnerability was found in OpenJPEG similar to CVE-2019-6988. This flaw allows an attacker to bypass existing protections and cause an application crash through a maliciously crafted file.","status":"published","published":"2026-05-26T19:31:24.313Z","modified":"2026-07-18T00:02:09.859757922Z","cvss":[{"version":"3.1","score":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","level":"medium"}],"updated_at":"2026-11-02T15:47:18.573531Z"},{"id":"OESA-2024-1846","title":"openjpeg2 security update","description":"OpenJPEG is an open-source JPEG 2000 codec written in C language. It has been developed in order to promote the use of JPEG 2000, a still-image compression standard from the Joint Photographic Experts Group (JPEG). Since April 2015, it is officially recognized by ISO/IEC and ITU-T as a JPEG 2000 Reference Software.\n\nSecurity Fix(es):\n\nA vulnerability was found in OpenJPEG similar to CVE-2019-6988. This flaw allows an attacker to bypass existing protections and cause an application crash through a maliciously crafted file.(CVE-2023-39328)","status":"published","published":"2024-07-19T11:07:18Z","modified":"2026-08-18T01:18:30.455573898Z","cvss":[{"version":"3.1","score":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","level":"medium"}],"updated_at":"2026-11-02T15:52:41.595342Z"},{"id":"UBUNTU-CVE-2023-39328","description":"A vulnerability was found in OpenJPEG similar to CVE-2019-6988. This flaw allows an attacker to bypass existing protections and cause an application crash through a maliciously crafted file.","status":"published","published":"2024-07-09T14:15:00Z","modified":"2026-10-21T23:00:10.223404615Z","cvss":[{"version":"3.1","score":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","level":"medium"}],"updated_at":"2026-11-02T16:54:21.882004Z"},{"id":"AZL-43657","title":"CVE-2023-39328 affecting package openjpeg2 2.3.1-12","description":"A vulnerability was found in OpenJPEG similar to CVE-2019-6988. This flaw allows an attacker to bypass existing protections and cause an application crash through a maliciously crafted file.","status":"published","published":"2024-07-09T14:15:03Z","modified":"2026-04-21T04:31:05.70551Z","updated_at":"2026-11-02T15:28:05.284713Z"},{"id":"AZL-44982","title":"CVE-2023-39328 affecting package openjpeg2 2.3.1-12","description":"A vulnerability was found in OpenJPEG similar to CVE-2019-6988. This flaw allows an attacker to bypass existing protections and cause an application crash through a maliciously crafted file.","status":"published","published":"2024-07-09T14:15:03Z","modified":"2026-11-05T05:36:30Z","updated_at":"2026-11-05T16:41:20.321068Z"},{"id":"ROOT-OS-DEBIAN-11-CVE-2023-39328","title":"CVE-2023-39328 in openjpeg2 - Patched by Root","description":"Root has patched CVE-2023-39328 in the openjpeg2 package for Root:Debian:11. Multiple fixed versions available.","status":"published","published":"2026-10-09T11:44:45Z","modified":"2026-10-09T12:15:03.908596596Z","updated_at":"2026-11-02T15:53:28.80888Z"},{"id":"ROOT-OS-DEBIAN-12-CVE-2023-39328","title":"CVE-2023-39328 in openjpeg2 - Patched by Root","description":"Root has patched CVE-2023-39328 in the openjpeg2 package for Root:Debian:12. Multiple fixed versions available.","status":"published","published":"2026-08-25T12:17:17Z","modified":"2026-08-26T01:12:54.988562801Z","updated_at":"2026-11-02T15:53:30.70924Z"},{"id":"ROOT-OS-DEBIAN-13-CVE-2023-39328","title":"CVE-2023-39328 in openjpeg2 - Patched by Root","description":"Root has patched CVE-2023-39328 in the openjpeg2 package for Root:Debian:13. Multiple fixed versions available.","status":"published","published":"2026-08-24T16:24:38Z","modified":"2026-08-24T18:45:15.350862166Z","updated_at":"2026-11-02T15:53:32.570806Z"},{"id":"ROOT-OS-UBUNTU-2404-CVE-2023-39328","title":"CVE-2023-39328 in openjpeg2 - Patched by Root","description":"Root has patched CVE-2023-39328 in the openjpeg2 package for Root:Ubuntu:24.04. Multiple fixed versions available.","status":"published","published":"2026-10-09T09:41:15Z","modified":"2026-10-09T10:18:01.181702174Z","updated_at":"2026-11-02T15:53:36.065158Z"}]}}