CVE Feed

    Dashboard / CVE / CVE-2019-19035

    CVE-2019-19035

    jhead 3.03 is affected by: heap-based buffer over-read. The impact is: Denial of service. The component is: ReadJpegSections and process_SOFn in jpgfile.c. The attack vector is: Open a specially crafted JPEG file.

    Published:Nov 17, 2019
    Last Modified:Nov 21, 2024
    EPS:Nov 17, 2019
    EPSS Score:0.00173
    CVSS Score:5.5

    Affected Products

    Vendor
    Jhead Project
    Product
    Jhead

    Exploits

    https://bugzilla.redhat.com/show_bug.cgi?id=1765647https://bugzilla.redhat.com/show_bug.cgi?id=1765647

    Common Weakness Enumeration

    CWE-125 Out-of-bounds Read

    Common Attack Pattern Enumeration and Classification (CAPEC)

    CAPEC-540 Overread Buffers

    Related CVEs

    CVE-2025-44906 (CVSS 7.8) — jhead v3.08 was discovered to contain a heap-use-after-free via the ProcessFile function at jhead.c.…
    CVE-2022-28550 (CVSS 9.8) — Matthias-Wandel/jhead jhead 3.06 is vulnerable to Buffer Overflow via shellescape(), jhead.c, jhead. jhead cop…
    CVE-2021-34055 (CVSS 7.8) — jhead 3.06 is vulnerable to Buffer Overflow via exif.c in function Put16u.…
    CVE-2022-41751 (CVSS 7.8) — Jhead 3.06.0.1 allows attackers to execute arbitrary OS commands by placing them in a JPEG filename and then u…
    CVE-2021-28276 (CVSS 7.5) — A Denial of Service vulnerability exists in jhead 3.04 and 3.05 via a wild address read in the ProcessCanonMak…
    CVE-2021-28278 (CVSS 7.8) — A Heap-based Buffer Overflow vulnerability exists in jhead 3.04 and 3.05 via the RemoveSectionType function in…
    CVE-2021-28275 (CVSS 5.5) — A Denial of Service vulnerability exists in jhead 3.04 and 3.05 due to a wild address read in the Get16u funct…
    CVE-2021-28277 (CVSS 7.8) — A Heap-based Buffer Overflow vulnerabilty exists in jhead 3.04 and 3.05 is affected by: Buffer Overflow via th…
    CVE-2020-26208 (CVSS 5.3) — JHEAD is a simple command line tool for displaying and some manipulation of EXIF header data embedded in Jpeg …
    CVE-2021-3496 (CVSS 7.8) — A heap-based buffer overflow was found in jhead in version 3.06 in Get16u() in exif.c when processing a crafte…

    Common Vulnerability Scoring System

    Attack Vector
    Network
    Adjacent
    Local
    Physical
    Privileges Required
    None
    Low
    High
    User Interaction
    None
    Required
    Scope
    Unchanged
    Changed
    Confidentiality
    None
    Low
    High
    Integrity
    None
    Low
    High
    Availability
    None
    Low
    High