CVE-2023-39328

Summary

A vulnerability was found in OpenJPEG similar to CVE-2019-6988. This flaw allows an attacker to bypass existing protections and cause an application crash through a maliciously crafted file.

Affected Software

Weaknesses

• CWE-400: Uncontrolled Resource Consumption

ADP Enrichment

CISA ADP Vulnrichment

• SSVC:
• Exploitation: none
  • Automatable: no
  • Technical Impact: partial

CVE Program Container

Additional References

• https://access.redhat.com/security/cve/CVE-2023-39328
• https://bugzilla.redhat.com/show_bug.cgi?id=2219236

References

• https://access.redhat.com/security/cve/CVE-2023-39328
• https://bugzilla.redhat.com/show_bug.cgi?id=2219236
• https://github.com/uclouvain/openjpeg/issues/1476
• https://github.com/uclouvain/openjpeg/pull/1470
• https://github.com/uclouvain/openjpeg/pull/1471

• ←Previous
• Next→