Jhead vulnerabilities

1 known vulnerability in Jhead from Jhead Project. 1 is rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 9.8 Critical severity

  Jhead: Out-of-bounds Write

  CVE-2022-28550Jun 13, 2023Jhead ProjectEPSS 1.05%

  Matthias-Wandel/jhead jhead 3.06 is vulnerable to Buffer Overflow via shellescape(), jhead.c, jhead. jhead copies strings to a stack buffer when it detects a &i or &o. However, jhead does not check the boundary of the stack buffer. As a result, there will be a