CVE-2021-3496 - A heap-based buffer overflow was found in jhead in version 3.06 in Get16u() in exif.c when processing a crafted file

Back Back to CVE browser

HIGH

A heap-based buffer overflow was found in jhead in version 3.06 in Get16u() in exif.c when processing a crafted file

Published Apr 22, 2021

7.8

HIGH

CVSS 3.1

EPSS 1.06%

Description

A heap-based buffer overflow was found in jhead in version 3.06 in Get16u() in exif.c when processing a crafted file.

Affected products

Vendor n/a Product Jhead Default
unknown
Affected
- jhead 3.06.0.1

Default status is the baseline for the product. Each version can override it (patched versions can be marked unaffected).

Vendor	Product	Default status	Versions
n/a	Jhead	unknown	Affected jhead 3.06.0.1

Remediation

No remediation recorded yet.

Weaknesses (2)

CWE-119

Buffer Overflow

CWE-787

Out-of-bounds Write

References (4)

https://bugzilla.redhat.com/show_bug.cgi?id=1949245
Issue TrackingThird Party Advisory
https://euvd.enisa.europa.eu/vulnerability/EUVD-2021-26817
Advisory
https://github.com/Matthias-Wandel/jhead/issues/33
ExploitPatchThird Party Advisory
https://security.gentoo.org/glsa/202210-17
vendor-advisoryThird Party Advisory

Link	Providers	Tags
https://bugzilla.redhat.com/show_bug.cgi?id=1949245		Issue TrackingThird Party Advisory
https://euvd.enisa.europa.eu/vulnerability/EUVD-2021-26817		Advisory
https://github.com/Matthias-Wandel/jhead/issues/33		ExploitPatchThird Party Advisory
https://security.gentoo.org/glsa/202210-17		vendor-advisoryThird Party Advisory

Change history (0)

No recorded changes yet.

Sources

CVE.org / MITRE

Status PUBLISHED

Assigner fedora

Published Apr 22, 2021

Updated Aug 3, 2024

Reserved Apr 13, 2021

Link CVE-2021-3496

CISA Vulnrichment

No data

NVD

Status Modified

Modified Jun 17, 2026

Link CVE-2021-3496

Red Hat

No data

ENISA EUVD

Assigner fedora

Published Apr 22, 2021

Updated Aug 3, 2024

Link EUVD-2021-26817

GitHub

No data