Vulnerabilities > Jhead Project > Jhead > 3.05

DATE CVE VULNERABILITY TITLE RISK
2022-03-23 CVE-2021-28275 Incorrect Type Conversion or Cast vulnerability in Jhead Project Jhead 3.04/3.05
A Denial of Service vulnerability exists in jhead 3.04 and 3.05 due to a wild address read in the Get16u function in exif.c in will cause segmentation fault via a crafted_file.
local
low complexity
jhead-project CWE-704
5.5
2022-03-23 CVE-2021-28276 Unspecified vulnerability in Jhead Project Jhead 3.04/3.05
A Denial of Service vulnerability exists in jhead 3.04 and 3.05 via a wild address read in the ProcessCanonMakerNoteDir function in makernote.c.
network
low complexity
jhead-project
7.5
2022-03-23 CVE-2021-28277 Out-of-bounds Write vulnerability in Jhead Project Jhead 3.04/3.05
A Heap-based Buffer Overflow vulnerabilty exists in jhead 3.04 and 3.05 is affected by: Buffer Overflow via the RemoveUnknownSections function in jpgfile.c.
local
low complexity
jhead-project CWE-787
7.8
2022-03-23 CVE-2021-28278 Out-of-bounds Write vulnerability in Jhead Project Jhead 3.04/3.05
A Heap-based Buffer Overflow vulnerability exists in jhead 3.04 and 3.05 via the RemoveSectionType function in jpgfile.c.
local
low complexity
jhead-project CWE-787
7.8