CVE-2021-28275

A Denial of Service vulnerability exists in jhead 3.04 and 3.05 due to a wild address read in the Get16u function in exif.c in will cause segmentation fault via a crafted_file.
References
Link Resource
https://github.com/Matthias-Wandel/jhead/issues/17 Exploit Issue Tracking Third Party Advisory
https://security.gentoo.org/glsa/202210-17 Third Party Advisory
https://github.com/Matthias-Wandel/jhead/issues/17 Exploit Issue Tracking Third Party Advisory
https://security.gentoo.org/glsa/202210-17 Third Party Advisory
Configurations

Configuration 1 (hide)

OR cpe:2.3:a:jhead_project:jhead:3.04:*:*:*:*:*:*:*
cpe:2.3:a:jhead_project:jhead:3.05:*:*:*:*:*:*:*

History

21 Nov 2024, 05:59

Type Values Removed Values Added
References () https://github.com/Matthias-Wandel/jhead/issues/17 - Exploit, Issue Tracking, Third Party Advisory () https://github.com/Matthias-Wandel/jhead/issues/17 - Exploit, Issue Tracking, Third Party Advisory
References () https://security.gentoo.org/glsa/202210-17 - Third Party Advisory () https://security.gentoo.org/glsa/202210-17 - Third Party Advisory

Information

Published : 2022-03-23 21:15

Updated : 2024-11-21 05:59


NVD link : CVE-2021-28275

Mitre link : CVE-2021-28275

CVE.ORG link : CVE-2021-28275


JSON object : View

Products Affected

jhead_project

  • jhead
CWE
CWE-704

Incorrect Type Conversion or Cast