Browse CVEs

HIGH 7.8 CVE-2025-44906 jhead v3.08 was discovered to contain a heap-use-after-free via the ProcessFile function at jhead.c. Jhead No fix yet Fix from $1,9502025-05-30 CRITICAL 9.8 CVE-2022-28550 Matthias-Wandel/jhead jhead 3.06 is vulnerable to Buffer Overflow via shellescape(), jhead.c, jhead. jhead copies strings to a stack buffer when it d… Jhead Patch available Fix from $2,3002023-06-13 HIGH 7.8 CVE-2021-28277 A Heap-based Buffer Overflow vulnerabilty exists in jhead 3.04 and 3.05 is affected by: Buffer Overflow via the RemoveUnknownSections function in jpg… Jhead No fix yet Fix from $1,9502022-03-23 HIGH 7.8 CVE-2021-28278 A Heap-based Buffer Overflow vulnerability exists in jhead 3.04 and 3.05 via the RemoveSectionType function in jpgfile.c. Jhead No fix yet Fix from $1,9502022-03-23 HIGH 7.5 CVE-2021-28276 A Denial of Service vulnerability exists in jhead 3.04 and 3.05 via a wild address read in the ProcessCanonMakerNoteDir function in makernote.c. Jhead Patch available Fix from $1,9502022-03-23 MEDIUM 5.5 CVE-2021-28275 A Denial of Service vulnerability exists in jhead 3.04 and 3.05 due to a wild address read in the Get16u function in exif.c in will cause segmentatio… Jhead No fix yet Fix from $1,6002022-03-23 MEDIUM 6.1 CVE-2020-26208 JHEAD is a simple command line tool for displaying and some manipulation of EXIF header data embedded in Jpeg images from digital cameras. In affecte… Jhead 3.04+ Fix from $1,6002022-02-02 HIGH 7.8 CVE-2021-3496 A heap-based buffer overflow was found in jhead in version 3.06 in Get16u() in exif.c when processing a crafted file. Jhead Patch available Fix from $1,9502021-04-22 HIGH 7.1 CVE-2020-6624 jhead through 3.04 has a heap-based buffer over-read in process_DQT in jpgqguess.c. Jhead after 3.04 Fix from $1,9502020-01-09 HIGH 7.1 CVE-2020-6625 jhead through 3.04 has a heap-based buffer over-read in Get32s when called from ProcessGpsInfo in gpsinfo.c. Jhead after 3.04 Fix from $1,9502020-01-09 MEDIUM 5.5 CVE-2019-19035 jhead 3.03 is affected by: heap-based buffer over-read. The impact is: Denial of service. The component is: ReadJpegSections and process_SOFn in jpgf… Jhead No fix yet Fix from $1,6002019-11-17 HIGH 7.8 CVE-2018-17088 The ProcessGpsInfo function of the gpsinfo.c file of jhead 3.00 may allow a remote attacker to cause a denial-of-service attack or unspecified other … Jhead Patch available Fix from $1,9502018-09-16 HIGH 7.8 CVE-2018-16554 The ProcessGpsInfo function of the gpsinfo.c file of jhead 3.00 may allow a remote attacker to cause a denial-of-service attack or unspecified other … Jhead Patch available Fix from $1,9502018-09-16 MEDIUM 5.5 CVE-2018-6612 An integer underflow bug in the process_EXIF function of the exif.c file of jhead 3.00 raises a heap-based buffer over-read when processing a malicio… Jhead Mitigation only Fix from $1,6002018-02-04