CVE Feed

    Dashboard / CVE / CVE-2020-6625

    CVE-2020-6625

    jhead through 3.04 has a heap-based buffer over-read in Get32s when called from ProcessGpsInfo in gpsinfo.c.

    Published:Jan 9, 2020
    Last Modified:Nov 21, 2024
    EPS:Jan 9, 2020
    EPSS Score:0.00851
    CVSS Score:7.1

    Affected Products

    Vendor
    Jhead Project
    Product
    Jhead

    Exploits

    https://bugs.launchpad.net/ubuntu/+source/jhead/+bug/1858746https://bugs.launchpad.net/ubuntu/+source/jhead/+bug/1858746

    Common Weakness Enumeration

    CWE-125 Out-of-bounds Read

    Common Attack Pattern Enumeration and Classification (CAPEC)

    CAPEC-540 Overread Buffers

    Related CVEs

    CVE-2025-44906 (CVSS 7.8) — jhead v3.08 was discovered to contain a heap-use-after-free via the ProcessFile function at jhead.c.…
    CVE-2022-28550 (CVSS 9.8) — Matthias-Wandel/jhead jhead 3.06 is vulnerable to Buffer Overflow via shellescape(), jhead.c, jhead. jhead cop…
    CVE-2021-34055 (CVSS 7.8) — jhead 3.06 is vulnerable to Buffer Overflow via exif.c in function Put16u.…
    CVE-2022-41751 (CVSS 7.8) — Jhead 3.06.0.1 allows attackers to execute arbitrary OS commands by placing them in a JPEG filename and then u…
    CVE-2021-28276 (CVSS 7.5) — A Denial of Service vulnerability exists in jhead 3.04 and 3.05 via a wild address read in the ProcessCanonMak…
    CVE-2021-28278 (CVSS 7.8) — A Heap-based Buffer Overflow vulnerability exists in jhead 3.04 and 3.05 via the RemoveSectionType function in…
    CVE-2021-28275 (CVSS 5.5) — A Denial of Service vulnerability exists in jhead 3.04 and 3.05 due to a wild address read in the Get16u funct…
    CVE-2021-28277 (CVSS 7.8) — A Heap-based Buffer Overflow vulnerabilty exists in jhead 3.04 and 3.05 is affected by: Buffer Overflow via th…
    CVE-2020-26208 (CVSS 5.3) — JHEAD is a simple command line tool for displaying and some manipulation of EXIF header data embedded in Jpeg …
    CVE-2021-3496 (CVSS 7.8) — A heap-based buffer overflow was found in jhead in version 3.06 in Get16u() in exif.c when processing a crafte…

    Common Vulnerability Scoring System

    Attack Vector
    Network
    Adjacent
    Local
    Physical
    Privileges Required
    None
    Low
    High
    User Interaction
    None
    Required
    Scope
    Unchanged
    Changed
    Confidentiality
    None
    Low
    High
    Integrity
    None
    Low
    High
    Availability
    None
    Low
    High