Medium USN-7037-1 1 CVE

openjpeg2 vulnerability

Published Sep 26, 2024 · Updated Jun 25, 2026

Ecosystem: Ubuntu

Summary

It was discovered that OpenJPEG could enter a large loop and continuously
print warning messages when given specially crafted input. An attacker
could potentially use this issue to cause a denial of service.

Fixed packages 5

Release	Package	Fixed in
Ubuntu · 20.04 LTS 20.04:LTS	openjpeg2	2.3.1-1ubuntu4.20.04.2
Ubuntu · 22.04 LTS 22.04:LTS	openjpeg2	2.4.0-6ubuntu0.1
Ubuntu · 24.04 LTS 24.04:LTS	openjpeg2	2.5.0-2ubuntu0.1
Ubuntu · Pro 16.04 LTS Pro:16.04:LTS	openjpeg2	2.1.2-1.1+deb9u6ubuntu0.1~esm4
Ubuntu · Pro 18.04 LTS Pro:18.04:LTS	openjpeg2	2.3.0-2+deb10u2ubuntu0.1~esm2

Vulnerabilities 1

Medium 4.3

CVE-2023-39327

Openjpeg: malicious files can cause the program to enter a large loop

A flaw was found in OpenJPEG. Maliciously constructed pictures can cause the program to enter a large loop and continuously print warning messages on the terminal.

Red Hat Red Hat Enterprise Linux 9 Red Hat Enterprise Linux 8 Red Hat Enterprise Linux 7 Linux Debian Ubuntu Azure Linux Wolfi

Jul 13, 2024

References

report
https://ubuntu.com/security/CVE-2023-39327