CVE-2025-44906

jhead v3.08 was discovered to contain a heap-use-after-free via the ProcessFile function at jhead.c...

PT-2025-23239 · Jhead +1 · Jhead +1

Name of the Vulnerable Software and Affected Versions: jhead version 3.08 Description: A heap-use-after-free issue was discovered in jhead via the ProcessFile function at jhead.c. This issue affects jhead version 3.08. Recommendations: For jhead version 3.08, as a temporary workaround, consider...

Denial Of Service (DoS)

jhead is vulnerable to Denial Of Service DoS. The vulnerability occurs due to a wild address read in the ProcessCanonMakerNoteDir function within makernote.c causing an application crash...

SUSE CVE-2021-28276

A Denial of Service vulnerability exists in jhead 3.04 and 3.05 via a wild address read in the ProcessCanonMakerNoteDir function in makernote.c...

PT-2022-26056 · Jhead +3 · Jhead +3

Name of the Vulnerable Software and Affected Versions: Jhead version 3.06.0.1 Description: The issue allows attackers to execute arbitrary OS commands by placing them in a JPEG filename and then using the regeneration -rgt50 option. Recommendations: For Jhead version 3.06.0.1, consider avoiding t...

CVE-2021-28278

A Heap-based Buffer Overflow vulnerability exists in jhead 3.04 and 3.05 via the RemoveSectionType function in jpgfile.c...

CVE-2021-28275

A Denial of Service vulnerability exists in jhead 3.04 and 3.05 due to a wild address read in the Get16u function in exif.c in will cause segmentation fault via a craftedfile...

MGASA-2017-0105 Updated jhead packages fix security vulnerability

It was discovered that jhead, a tool to manipulate the non-image part of EXIF compliant JPEG files, is prone to an out-of-bounds access vulnerability, which may result in denial of service or, potentially, the execution of arbitrary code if an image with specially crafted EXIF data is processed...

DLA-864-1 jhead - security update

Bulletin has no description...

JHead multiple security vulnerabilities

Buffer overflow, symlink vulnerability, unfiltered shell characters vulnerability...

DEBIAN-CVE-2008-4640

The DoCommand function in jhead.c in Matthias Wandel jhead 2.84 and earlier allows local users to delete arbitrary files via vectors involving a modified input filename in which 1 a final "z" character is replaced by a "t" character or 2 a final "t" character is replaced by a "z" character...