OpenJPEG: Mehrere Schwachstellen ermöglichen Denial of Service

Summary

Product

Vulnerabilities 3

• Medium 6.5
  CVE-2023-39329

  Openjpeg: resource exhaustion will occur in the opj_t1_decode_cblks function in the tcd.c

  A flaw was found in OpenJPEG. A resource exhaustion can occur in the opj_t1_decode_cblks function in tcd.c through a crafted image file, causing a denial of service.

  Red Hat Red Hat Enterprise Linux 9 Red Hat Enterprise Linux 8 Red Hat Enterprise Linux 7 Linux Debian Ubuntu Azure Linux Wolfi
  Jul 13, 2024
• Medium 5.5
  CVE-2023-39328

  Openjpeg: denail of service via crafted image file

  A vulnerability was found in OpenJPEG similar to CVE-2019-6988. This flaw allows an attacker to bypass existing protections and cause an application crash through a maliciously crafted file.

  Red Hat Red Hat Enterprise Linux 9 Red Hat Enterprise Linux 8 Red Hat Enterprise Linux 7 Linux Debian Ubuntu Azure Linux Wolfi
  Jul 9, 2024
• Medium 4.3
  CVE-2023-39327

  Openjpeg: malicious files can cause the program to enter a large loop

  A flaw was found in OpenJPEG. Maliciously constructed pictures can cause the program to enter a large loop and continuously print warning messages on the terminal.

  Red Hat Red Hat Enterprise Linux 9 Red Hat Enterprise Linux 8 Red Hat Enterprise Linux 7 Linux Debian Ubuntu Azure Linux Wolfi
  Jul 13, 2024

Revision history

1. 2026-03-09 #9

   Neue Updates von Red Hat aufgenommen

2. 2026-02-18 #8

   Neue Updates von SUSE aufgenommen

3. 2026-01-29 #7

   Neue Updates von SUSE aufgenommen

4. 2026-01-28 #6

   Neue Updates von SUSE aufgenommen

5. 2026-01-27 #5

   Neue Updates von openSUSE aufgenommen

6. 2025-11-05 #4

   Neue Updates von SUSE aufgenommen

7. 2024-09-25 #3

   Neue Updates von Ubuntu aufgenommen

8. 2024-09-08 #2

   Neue Updates von Fedora aufgenommen

9. 2024-07-04 #1

   Initiale Fassung

References

• Red Hat Bugzilla vom 2024-07-04
  https://bugzilla.redhat.com/show_bug.cgi?id=2295812
• Red Hat Bugzilla vom 2024-07-04
  https://bugzilla.redhat.com/show_bug.cgi?id=2295816
• RedHat Customer Portal vom 2024-07-04
  https://access.redhat.com/security/cve/CVE-2023-39329
• RedHat Customer Portal vom 2024-07-04
  https://access.redhat.com/security/cve/CVE-2023-39327
• RedHat Customer Portal vom 2024-07-04
  https://access.redhat.com/security/cve/CVE-2023-39328
• Fedora Security Advisory FEDORA-2024-3ECDF562BF vom 2024-09-06
  https://bodhi.fedoraproject.org/updates/FEDORA-2024-3ecdf562bf
• Ubuntu Security Notice USN-7037-1 vom 2024-09-26
  https://ubuntu.com/security/notices/USN-7037-1
• SUSE Security Update SUSE-SU-2025:3946-1 vom 2025-11-05
  https://lists.suse.com/pipermail/sle-security-updates/2025-November/023156.html
• openSUSE Security Update OPENSUSE-SU-2026:10095-1 vom 2026-01-27
  https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/4RGNCBT52AZ6MP2GWV7ULEHBR4EY73UJ/
• SUSE Security Update SUSE-SU-2026:0320-1 vom 2026-01-29
  https://lists.suse.com/pipermail/sle-security-updates/2026-January/023977.html
• SUSE Security Update SUSE-SU-2026:0330-1 vom 2026-01-30
  https://lists.suse.com/pipermail/sle-security-updates/2026-January/023982.html
• SUSE Security Update SUSE-SU-2026:20422-1 vom 2026-02-18
  https://lists.suse.com/pipermail/sle-security-updates/2026-February/024348.html
• Red Hat Security Advisory RHSA-2026:4128 vom 2026-03-09
  https://access.redhat.com/errata/RHSA-2026:4128