CVE-2021-3496
Summary
| CVE | CVE-2021-3496 |
|---|
| State | PUBLIC |
|---|
| Assigner | [email protected] |
|---|
| Source Priority | CVE Program / NVD first with legacy fallback |
|---|
| Published | 2021-04-22 19:15:00 UTC |
|---|
| Updated | 2022-12-21 15:01:00 UTC |
|---|
| Description | A heap-based buffer overflow was found in jhead in version 3.06 in Get16u() in exif.c when processing a crafted file. |
|---|
NVD Known Affected Configurations (CPE 2.3)
| Type | Vendor | Product | Version | Update | Edition | Language |
|---|
| Application |
Jhead Project |
Jhead |
3.06 |
All |
All |
All |
References
| Reference | Source | Link | Tags |
|---|
| [ Security] heap-buffer-overflow of exif.c in function Get16u · Issue #33 · Matthias-Wandel/jhead · GitHub |
MISC |
github.com |
|
| JHead: Multiple Vulnerabilities (GLSA 202210-17) — Gentoo security |
GENTOO |
security.gentoo.org |
|
| 1949245 – (CVE-2021-3496) CVE-2021-3496 jhead: heap-based buffer overflow in Get16u() in exif.c |
MISC |
bugzilla.redhat.com |
|
| CVE Program record |
CVE.ORG |
www.cve.org |
canonical |
| NVD vulnerability detail |
NVD |
nvd.nist.gov |
canonical, analysis |
No vendor comments have been submitted for this CVE.
Legacy QID Mappings
- 179551 Debian Security Update for jhead (CVE-2021-3496)
- 199565 Ubuntu Security Notification for Jhead Vulnerabilities (USN-6110-1)
- 710664 Gentoo Linux JHead Multiple Vulnerabilities (GLSA 202210-17)
- 750206 OpenSUSE Security Update for jhead (openSUSE-SU-2021:0743-1)
- 750255 OpenSUSE Security Update for jhead (openSUSE-SU-2021:0594-1)
