CVE Feed

    Dashboard / CVE / CVE-2018-16554

    CVE-2018-16554

    The ProcessGpsInfo function of the gpsinfo.c file of jhead 3.00 may allow a remote attacker to cause a denial-of-service attack or unspecified other impact via a malicious JPEG file, because of inconsistency between float and double in a sprintf format string during TAG_GPS_ALT handling.

    Published:Sep 16, 2018
    Last Modified:Nov 21, 2024
    EPS:Sep 16, 2018
    EPSS Score:0.00296
    CVSS Score:7.8

    Affected Products

    Vendor
    Jhead Project
    Product
    Jhead

    Exploits

    https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=908176https://nimo-zhang.github.io/2018/09/07/bug-analysis-1/#morehttps://bugs.debian.org/cgi-bin/bugreport.cgi?bug=908176https://nimo-zhang.github.io/2018/09/07/bug-analysis-1/#more

    Common Attack Pattern Enumeration and Classification (CAPEC)

    CAPEC-135 Format String Injection
    CAPEC-67 String Format Overflow in syslog()

    Related CVEs

    CVE-2025-44906 (CVSS 7.8) — jhead v3.08 was discovered to contain a heap-use-after-free via the ProcessFile function at jhead.c.…
    CVE-2022-28550 (CVSS 9.8) — Matthias-Wandel/jhead jhead 3.06 is vulnerable to Buffer Overflow via shellescape(), jhead.c, jhead. jhead cop…
    CVE-2021-34055 (CVSS 7.8) — jhead 3.06 is vulnerable to Buffer Overflow via exif.c in function Put16u.…
    CVE-2022-41751 (CVSS 7.8) — Jhead 3.06.0.1 allows attackers to execute arbitrary OS commands by placing them in a JPEG filename and then u…
    CVE-2021-28276 (CVSS 7.5) — A Denial of Service vulnerability exists in jhead 3.04 and 3.05 via a wild address read in the ProcessCanonMak…
    CVE-2021-28278 (CVSS 7.8) — A Heap-based Buffer Overflow vulnerability exists in jhead 3.04 and 3.05 via the RemoveSectionType function in…
    CVE-2021-28275 (CVSS 5.5) — A Denial of Service vulnerability exists in jhead 3.04 and 3.05 due to a wild address read in the Get16u funct…
    CVE-2021-28277 (CVSS 7.8) — A Heap-based Buffer Overflow vulnerabilty exists in jhead 3.04 and 3.05 is affected by: Buffer Overflow via th…
    CVE-2020-26208 (CVSS 5.3) — JHEAD is a simple command line tool for displaying and some manipulation of EXIF header data embedded in Jpeg …
    CVE-2021-3496 (CVSS 7.8) — A heap-based buffer overflow was found in jhead in version 3.06 in Get16u() in exif.c when processing a crafte…

    Common Vulnerability Scoring System

    Attack Vector
    Network
    Adjacent
    Local
    Physical
    Privileges Required
    None
    Low
    High
    User Interaction
    None
    Required
    Scope
    Unchanged
    Changed
    Confidentiality
    None
    Low
    High
    Integrity
    None
    Low
    High
    Availability
    None
    Low
    High