Jhead

Submit a proposal Propose CVE/GCVE/GHSA reference

Approved changes feed: RSS · Atom

cpe:2.3:a:jhead_project:jhead:3.08:*:*:*:*:*:*:*

part: a version: 3.08 update: *

VendorJhead Project (d70290e8-d1c3-5672-9dae-41f5e0f1e77a)
ProductJhead (1594fbbb-a186-56a4-b116-7caaf9e4e7a8)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*

Notes

Imported from purl2cpe mapping

PURL mappings

PURLSourceLast updated
pkg:deb/debian/jhead purl2cpe 2026-06-01 10:15:36.945848
pkg:deb/ubuntu/jhead purl2cpe 2026-06-01 10:15:36.945850
pkg:github/matthias-wandel/jhead purl2cpe 2026-06-01 10:15:36.945851
pkg:rpm/fedora/jhead purl2cpe 2026-06-01 10:15:36.945852
pkg:rpm/opensuse/jhead purl2cpe 2026-06-01 10:15:36.945854

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2025-44906 vulnerable 2026-06-08 07:25:10.889531 Details available
jhead v3.08 was discovered to contain a heap-use-after-free via the ProcessFile function at jhead.c.
Published: 2025-05-30T00:00:00.000Z
Updated: 2025-05-30T22:01:48.645Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-2824 vulnerable 2026-06-08 06:35:27.447195 Matthias-Wandel jhead exif.c PrintFormatNumber heap-based overflow
MEDIUM (6.3)
A vulnerability was found in Matthias-Wandel jhead 3.08 and classified as critical. This issue affects the function PrintFormatNumber of the file exif.c. The manipulation leads to heap-based buffer overflow. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-257711.
Published: 2024-03-22T18:00:08.695Z
Updated: 2024-08-01T20:47:22.904Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.

Inspect record JSON

Open JSON directly

Open this panel to browse, search, copy or download the JSON record.