Jhead Project: >> Jhead >> 3.05 Security Vulnerabilities
A Denial of Service vulnerability exists in jhead 3.04 and 3.05 due to a wild address read in the Get16u function in exif.c in will cause segmentation fault via a crafted_file.
CVSS Score
5.5
EPSS Score
0.001
Published
2022-03-23
A Denial of Service vulnerability exists in jhead 3.04 and 3.05 via a wild address read in the ProcessCanonMakerNoteDir function in makernote.c.
CVSS Score
7.5
EPSS Score
0.001
Published
2022-03-23
A Heap-based Buffer Overflow vulnerabilty exists in jhead 3.04 and 3.05 is affected by: Buffer Overflow via the RemoveUnknownSections function in jpgfile.c.
CVSS Score
7.8
EPSS Score
0.001
Published
2022-03-23
A Heap-based Buffer Overflow vulnerability exists in jhead 3.04 and 3.05 via the RemoveSectionType function in jpgfile.c.
CVSS Score
7.8
EPSS Score
0.001
Published
2022-03-23