Approved changes feed: RSS · Atom

cpe:2.3:a:jhead_project:jhead:3.04:*:*:*:*:*:*:*

part: a version: 3.04 update: *

VendorJhead Project (d70290e8-d1c3-5672-9dae-41f5e0f1e77a)
ProductJhead (1594fbbb-a186-56a4-b116-7caaf9e4e7a8)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*

Notes

Imported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
pkg:deb/debian/jhead purl2cpe 2026-06-01 10:15:36.941305
pkg:deb/ubuntu/jhead purl2cpe 2026-06-01 10:15:36.941307
pkg:github/matthias-wandel/jhead purl2cpe 2026-06-01 10:15:36.941308
pkg:rpm/fedora/jhead purl2cpe 2026-06-01 10:15:36.941309
pkg:rpm/opensuse/jhead purl2cpe 2026-06-01 10:15:36.941311

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2021-28278 vulnerable 2026-06-08 05:31:23.764975 Details available
A Heap-based Buffer Overflow vulnerability exists in jhead 3.04 and 3.05 via the RemoveSectionType function in jpgfile.c.
Published: 2022-03-23T00:00:00.000Z
Updated: 2024-08-03T21:40:12.859Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-28277 vulnerable 2026-06-08 05:31:23.764532 Details available
A Heap-based Buffer Overflow vulnerabilty exists in jhead 3.04 and 3.05 is affected by: Buffer Overflow via the RemoveUnknownSections function in jpgfile.c.
Published: 2022-03-23T00:00:00.000Z
Updated: 2024-08-03T21:40:14.198Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-28276 vulnerable 2026-06-08 05:31:23.764103 Details available
A Denial of Service vulnerability exists in jhead 3.04 and 3.05 via a wild address read in the ProcessCanonMakerNoteDir function in makernote.c.
Published: 2022-03-23T00:00:00.000Z
Updated: 2024-08-03T21:40:14.172Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-28275 vulnerable 2026-06-08 05:31:23.762756 Details available
A Denial of Service vulnerability exists in jhead 3.04 and 3.05 due to a wild address read in the Get16u function in exif.c in will cause segmentation fault via a crafted_file.
Published: 2022-03-23T00:00:00.000Z
Updated: 2024-08-03T21:40:14.193Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.

Inspect record JSON

Open JSON directly

Open this panel to browse, search, copy or download the JSON record.