CyberSecBulletin

Jhead Project vulnerabilities

We track 1 vulnerability in Jhead Project products. 1 is rated high or critical, and none are known to be exploited. The most recent was published on June 13, 2023.

1vulnerabilities
1critical
0high
0exploited
9.8average CVSS score

Latest Jhead Project vulnerabilities

  • 9.8 Critical severity

    Jhead: Out-of-bounds Write

    CVE-2022-28550Jhead ProjectEPSS 1.05%

    Matthias-Wandel/jhead jhead 3.06 is vulnerable to Buffer Overflow via shellescape(), jhead.c, jhead. jhead copies strings to a stack buffer when it detects a &i or &o. However, jhead does not check the boundary of the stack buffer. As a result, there will be a