A Denial of Service vulnerability exists in jhead 3.04 and 3.05 due to a wild address read in the Get16u function in exif.c in will cause segmentation fault via a crafted_file.
References
Link | Resource |
---|---|
https://github.com/Matthias-Wandel/jhead/issues/17 | Exploit Issue Tracking Third Party Advisory |
https://security.gentoo.org/glsa/202210-17 | Third Party Advisory |
Configurations
Configuration 1 (hide)
|
History
No history.
Information
Published : 2022-03-23 21:15
Updated : 2024-02-28 19:09
NVD link : CVE-2021-28275
Mitre link : CVE-2021-28275
CVE.ORG link : CVE-2021-28275
JSON object : View
Products Affected
jhead_project
- jhead
CWE
CWE-704
Incorrect Type Conversion or Cast