PT-2025-23239

Name of the Vulnerable Software and Affected Versions jhead version 3.08 Description A heap-use-after-free issue was discovered in the ProcessFile function at jhead.c. This issue affects the processing of files, potentially leading to exploitation. Recommendations For jhead version 3.08, consider...

CVE-2025-44906: Use After Free

jhead v3.08 was discovered to contain a heap-use-after-free via the ProcessFile function at jhead.c...

CVE-2025-44906

jhead v3.08 was discovered to contain a heap-use-after-free via the ProcessFile function at jhead.c...

CVE-2025-44906

jhead v3.08 was discovered to contain a heap-use-after-free via the ProcessFile function at jhead.c...

jhead 资源管理错误漏洞

jhead is a command line program by the individual developer Matthias Wandel. A security vulnerability exists in jhead version v3.08, which stems from a post-release reuse of the ProcessFile function in the jhead.c file, which could lead to the execution of arbitrary code...

CVE-2025-44906

Removed by vendor...

CVE-2025-44906

jhead v3.08 was discovered to contain a heap-use-after-free via the ProcessFile function at jhead.c...

CVE-2020-28840

Buffer Overflow vulnerability in jpgfile.c in Matthias-Wandel jhead version 3.04, allows local attackers to execute arbitrary code and cause a denial of service DoS...

Linux Distros Unpatched Vulnerability : CVE-2022-28550

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Matthias-Wandel/jhead jhead 3.06 is vulnerable to Buffer Overflow via shellescape, jhead.c, jhead. jhead copies strings to a stack buffer when it detects a &i o...

Linux Distros Unpatched Vulnerability : CVE-2021-28276

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A Denial of Service vulnerability exists in jhead 3.04 and 3.05 via a wild address read in the ProcessCanonMakerNoteDir function in makernote.c. CVE-2021-28276...

Linux Distros Unpatched Vulnerability : CVE-2021-28275

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A Denial of Service vulnerability exists in jhead 3.04 and 3.05 due to a wild address read in the Get16u function in exif.c in will cause segmentation fault via...

Fedora 37 : jhead (2022-628829f0e6)

The remote Fedora 37 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2022-628829f0e6 advisory. added patches to fix CVE-2022-41751 Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that Ness...

GLSA-202406-05 : JHead: Multiple Vulnerabilities

The remote host is affected by the vulnerability described in GLSA-202406-05 JHead: Multiple Vulnerabilities Multiple vulnerabilities have been discovered in JHead. Please review the CVE identifiers referenced below for details. Tenable has extracted the preceding description block directly from...

JHead: Multiple Vulnerabilities

Background JHead is an EXIF JPEG header manipulation tool. Description Multiple vulnerabilities have been discovered in JHead. Please review the CVE identifiers referenced below for details. Impact Please review the referenced CVE identifiers for details. Workaround There is no known workaround a...

OPENSUSE-SU-2024:10880-1 jhead-3.06.0.1-1.3 on GA media

These are all security issues fixed in the jhead-3.06.0.1-1.3 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2024:12499-1 jhead-3.06.0.1-3.1 on GA media

These are all security issues fixed in the jhead-3.06.0.1-3.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2024:10096-1 jhead-3.00-1.8 on GA media

These are all security issues fixed in the jhead-3.00-1.8 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2024:12466-1 jhead-3.06.0.1-2.1 on GA media

These are all security issues fixed in the jhead-3.06.0.1-2.1 package on the GA media of openSUSE Tumbleweed...

SUSE CVE-2024-2824

A vulnerability was found in Matthias-Wandel jhead 3.08 and classified as critical. This issue affects the function PrintFormatNumber of the file exif.c. The manipulation leads to heap-based buffer overflow. The attack may be initiated remotely. The exploit has been disclosed to the public and ma...

CVE-2024-2824

A vulnerability was found in Matthias-Wandel jhead 3.08 and classified as critical. This issue affects the function PrintFormatNumber of the file exif.c. The manipulation leads to heap-based buffer overflow. The attack may be initiated remotely. The exploit has been disclosed to the public and ma...