CVE-2023-39327
Advisory lineage Upstream: 0 Downstream: 11
Modified
Published: 13 Jul 2024, 03:08
Last modified:09 Mar 2026, 19:02
Vulnerability Summary
Overall Risk (default)
low
17/100 CVSS Score
4.3 MEDIUM
v3.1 (cve.org)
EPSS Score
0.03% LOW
0% probability -0.02%
KEV
Not listed
Ransomware
No reports
Public exploits
None found
Dark Web
Not detected
Timeline
13 Jul 2024, 03:08
Published
Vulnerability first disclosed
09 Mar 2026, 19:02
Last Modified
Vulnerability information updated
Description
A flaw was found in OpenJPEG. Maliciously constructed pictures can cause the program to enter a large loop and continuously print warning messages on the terminal.
CVSS Metrics
- v3.1•MEDIUM•Score: 4.3CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L
EPSS Trends
Current EPSS score: 0.03%• Percentile: 8%
Techniques & Countermeasures
- CWE-400•Uncontrolled Resource Consumption
The product does not properly control the allocation and maintenance of a limited resource.
Affected Systems
- uclouvain•openjpeg
na | 2.0 | 2.5.0