VDB

GCVE-110-MAGEIA-2021-328

GCVE-110-MAGEIA-2021-328
Advisory Published
Vulnetix · Advisory published July 10, 2021
Updated jhead package fixes security vulnerabilities: jhead through 3.04 has a heap-based buffer over-read in process_DQT in jpgqguess.c (CVE-2020-6624). jhead through 3.04 has a heap-based buffer over-read in Get32s when called from ProcessGpsInfo in gpsinfo.c (CVE-2020-6625). A heap-based buffer overflow was found in jhead in version 3.06 in Get16u() in exif.c when processing a crafted file (CVE-2021-3496).

Affected Products

VendorProductVersionsPlatforms
Mageiajhead0 (affected), 3.06.0.1-1.mga7 (unaffected)
Mageiajhead3.06.0.1-1.mga8 (unaffected), 0 (affected)

Browse GCVE Records

74,147 records in the GCVE database · Updated July 21, 2026

No matching records found.

Explore Further

Investigate this vulnerability in the interactive console or download the raw GCVE record.

$ Console Community · 100/wk Open console ›