VDB
GCVE-VVD-MAGEIA-2021-328
GCVE-VVD-MAGEIA-2021-328
Advisory Published
Updated jhead package fixes security vulnerabilities:
jhead through 3.04 has a heap-based buffer over-read in process_DQT in
jpgqguess.c (CVE-2020-6624).
jhead through 3.04 has a heap-based buffer over-read in Get32s when called
from ProcessGpsInfo in gpsinfo.c (CVE-2020-6625).
A heap-based buffer overflow was found in jhead in version 3.06 in Get16u()
in exif.c when processing a crafted file (CVE-2021-3496).
Affected Products
| Vendor | Product | Versions | Platforms |
|---|---|---|---|
| Mageia | jhead | 0 (affected), 3.06.0.1-1.mga7 (unaffected) | — |
| Mageia | jhead | 0 (affected), 3.06.0.1-1.mga8 (unaffected) | — |
Aliases
Transitive aliases
Browse GCVE Records
100 records in the GCVE database · Updated April 16, 2026
No matching records found.
Explore Further
Investigate this vulnerability in the interactive console or download the raw GCVE record.