CoreCVE
Back

MEDIUM

An integer underflow bug in the process_EXIF function of the exif.c file of jhead 3.00 raises a heap-based buffer over-read when processing a malicious JPEG file, which may allow a remote attacker to cause a denial-of-service attack or unspecified other impact

Published Feb 4, 2018

Description

An integer underflow bug in the process_EXIF function of the exif.c file of jhead 3.00 raises a heap-based buffer over-read when processing a malicious JPEG file, which may allow a remote attacker to cause a denial-of-service attack or unspecified other impact.

Affected products

Remediation

No remediation recorded yet.

Metrics

Weaknesses (2)

CWE-125

Out-of-bounds Read

CWE-191

References (2)

Change history (0)

No recorded changes yet.

Sources
CVE.org / MITRE
Status PUBLISHED
Assigner mitre
Published Feb 4, 2018
Updated Sep 17, 2024
Reserved Feb 4, 2018
Link CVE-2018-6612
CISA Vulnrichment
Updated n/a
NVD
Status Modified
Modified Jun 17, 2026
Link CVE-2018-6612
Red Hat
Severity n/a
Public date n/a
Links CVE-2018-6612