CVE-2021-28275

A Denial of Service vulnerability exists in jhead 3.04 and 3.05 due to a wild address read in the Get16u function in exif.c in will cause segmentation fault via a crafted_file.
References
Link Resource
https://github.com/Matthias-Wandel/jhead/issues/17 Exploit Issue Tracking Third Party Advisory
https://security.gentoo.org/glsa/202210-17 Third Party Advisory
Configurations

Configuration 1 (hide)

OR cpe:2.3:a:jhead_project:jhead:3.04:*:*:*:*:*:*:*
cpe:2.3:a:jhead_project:jhead:3.05:*:*:*:*:*:*:*

History

No history.

Information

Published : 2022-03-23 21:15

Updated : 2024-02-28 19:09


NVD link : CVE-2021-28275

Mitre link : CVE-2021-28275

CVE.ORG link : CVE-2021-28275


JSON object : View

Products Affected

jhead_project

  • jhead
CWE
CWE-704

Incorrect Type Conversion or Cast