CVE-2020-26208
Summary
| CVE | CVE-2020-26208 |
|---|
| State | PUBLIC |
|---|
| Assigner | [email protected] |
|---|
| Source Priority | CVE Program / NVD first with legacy fallback |
|---|
| Published | 2022-02-02 12:15:00 UTC |
|---|
| Updated | 2022-02-07 15:54:00 UTC |
|---|
| Description | JHEAD is a simple command line tool for displaying and some manipulation of EXIF header data embedded in Jpeg images from digital cameras. In affected versions there is a heap-buffer-overflow on jhead-3.04/jpgfile.c:285 ReadJpegSections. Crafted jpeg images can be provided to the user resulting in a program crash or potentially incorrect exif information retrieval. Users are advised to upgrade. There is no known workaround for this issue. |
|---|
NVD Known Affected Configurations (CPE 2.3)
| Type | Vendor | Product | Version | Update | Edition | Language |
|---|
| Application |
Jhead Project |
Jhead |
All |
All |
All |
All |
References
| Reference | Source | Link | Tags |
|---|
| heap-buffer-overflow on jhead-3.04/jpgfile.c:285 ReadJpegSections · Advisory · F-ZhaoYang/jhead · GitHub |
CONFIRM |
github.com |
|
| heap-buffer-overflow on jhead-3.04/jpgfile.c:285 ReadJpegSections · Issue #7 · Matthias-Wandel/jhead · GitHub |
MISC |
github.com |
|
| Bug #1900821 “heap-buffer-overflow on jhead-3.04/jpgfile.c:285 R...” : Bugs : jhead package : Ubuntu |
MISC |
bugs.launchpad.net |
|
| Just allocate 20 bytes extra at the end of a section. Otherwise, we end · F-ZhaoYang/jhead@5186ddc · GitHub |
MISC |
github.com |
|
| CVE Program record |
CVE.ORG |
www.cve.org |
canonical |
| NVD vulnerability detail |
NVD |
nvd.nist.gov |
canonical, analysis |
No vendor comments have been submitted for this CVE.
Legacy QID Mappings
- 180666 Debian Security Update for jhead (CVE-2020-26208)
- 199359 Ubuntu Security Notification for Jhead Vulnerabilities (USN-6098-1)
