CVE-2023-39328

MediumCVSS 5.5

Published: 09/07/2024(UTC)Updated: 26/06/2026(UTC)Translated: 27/06/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.24%

15th percentile - higher than 15% of all known CVEs

Summary

A vulnerability was found in OpenJPEG similar to CVE-2019-6988, which allows an attacker to bypass existing protections and cause an application crash through a maliciously crafted file.

Risk Assessment

The risk involves the possibility of remotely causing an application crash, which may lead to service disruption and potential data loss.

Recommendation

It is recommended to immediately update OpenJPEG to the latest version that includes a fix for this vulnerability.

Original NVD description (English source)

A vulnerability was found in OpenJPEG similar to CVE-2019-6988. This flaw allows an attacker to bypass existing protections and cause an application crash through a maliciously crafted file.