Vulnerabilities > Jhead Project

DATE CVE VULNERABILITY TITLE RISK
2023-06-13 CVE-2022-28550 Out-of-bounds Write vulnerability in Jhead Project Jhead 3.06
Matthias-Wandel/jhead jhead 3.06 is vulnerable to Buffer Overflow via shellescape(), jhead.c, jhead.
network
low complexity
jhead-project CWE-787
critical
9.8
2022-11-04 CVE-2021-34055 Classic Buffer Overflow vulnerability in multiple products
jhead 3.06 is vulnerable to Buffer Overflow via exif.c in function Put16u.
local
low complexity
jhead-project debian CWE-120
7.8
2022-10-17 CVE-2022-41751 OS Command Injection vulnerability in multiple products
Jhead 3.06.0.1 allows attackers to execute arbitrary OS commands by placing them in a JPEG filename and then using the regeneration -rgt50 option.
local
low complexity
jhead-project fedoraproject debian CWE-78
7.8
2022-03-23 CVE-2021-28275 Incorrect Type Conversion or Cast vulnerability in Jhead Project Jhead 3.04/3.05
A Denial of Service vulnerability exists in jhead 3.04 and 3.05 due to a wild address read in the Get16u function in exif.c in will cause segmentation fault via a crafted_file.
local
low complexity
jhead-project CWE-704
5.5
2022-03-23 CVE-2021-28276 Unspecified vulnerability in Jhead Project Jhead 3.04/3.05
A Denial of Service vulnerability exists in jhead 3.04 and 3.05 via a wild address read in the ProcessCanonMakerNoteDir function in makernote.c.
network
low complexity
jhead-project
7.5
2022-03-23 CVE-2021-28277 Out-of-bounds Write vulnerability in Jhead Project Jhead 3.04/3.05
A Heap-based Buffer Overflow vulnerabilty exists in jhead 3.04 and 3.05 is affected by: Buffer Overflow via the RemoveUnknownSections function in jpgfile.c.
local
low complexity
jhead-project CWE-787
7.8
2022-03-23 CVE-2021-28278 Out-of-bounds Write vulnerability in Jhead Project Jhead 3.04/3.05
A Heap-based Buffer Overflow vulnerability exists in jhead 3.04 and 3.05 via the RemoveSectionType function in jpgfile.c.
local
low complexity
jhead-project CWE-787
7.8
2022-02-02 CVE-2020-26208 Out-of-bounds Write vulnerability in Jhead Project Jhead
JHEAD is a simple command line tool for displaying and some manipulation of EXIF header data embedded in Jpeg images from digital cameras.
local
low complexity
jhead-project CWE-787
6.1
2021-04-22 CVE-2021-3496 Out-of-bounds Write vulnerability in Jhead Project Jhead 3.06
A heap-based buffer overflow was found in jhead in version 3.06 in Get16u() in exif.c when processing a crafted file.
local
low complexity
jhead-project CWE-787
7.8
2020-01-09 CVE-2020-6625 Out-of-bounds Read vulnerability in Jhead Project Jhead
jhead through 3.04 has a heap-based buffer over-read in Get32s when called from ProcessGpsInfo in gpsinfo.c.
local
low complexity
jhead-project CWE-125
7.1