openjpeg vulnerabilities
CVEs whose affected-version data names the openjpeg package. Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.
3 CVEsRSS
CVE-2023-39329Medium· 6.5A flaw was found in OpenJPEG
A flaw was found in OpenJPEG. A resource exhaustion can occur in the opj_t1_decode_cblks function in tcd.c through a crafted image file, causing a denial of service.
▾ Sunlituclouvain · openjpegEPSS 0.56%via NVD
CVE-2023-39327Medium· 4.3A flaw was found in OpenJPEG
A flaw was found in OpenJPEG. Maliciously constructed pictures can cause the program to enter a large loop and continuously print warning messages on the terminal.
▾ Sunlituclouvain · openjpegEPSS 0.53%via NVD
CVE-2023-39328Medium· 5.5A vulnerability was found in OpenJPEG similar to CVE-2019-6988
A vulnerability was found in OpenJPEG similar to CVE-2019-6988. This flaw allows an attacker to bypass existing protections and cause an application crash through a maliciously crafted file.
▾ Sunlituclouvain · openjpegEPSS 0.24%via NVD