Description
A Denial of Service vulnerability exists in jhead 3.04 and 3.05 due to a wild address read in the Get16u function in exif.c in will cause segmentation fault via a crafted_file.
Scores
CVSS v3
5.5
EPSS
0.0010
EPSS Percentile
26.4%
Attack Vector
LOCAL
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
Details
CWE
CWE-704
Status
published
Products (2)
jhead_project/jhead
3.04
jhead_project/jhead
3.05
Published
Mar 23, 2022
Tracked Since
Feb 18, 2026