high7.1
CVE-2020-6625
jhead through 3.04 has a heap-based buffer over-read in Get32s when called from ProcessGpsInfo in gpsinfo.c.
Impact
jhead through 3.04 has a heap-based buffer over-read in Get32s when called from ProcessGpsInfo in gpsinfo.c.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Jhead Project | Jhead | through 3.04 |
Weakness classification
References
- NVD record
- CVE.org record
- https://bugs.gentoo.org/711220#c3
- https://bugs.gentoo.org/876247#c0
- https://bugs.launchpad.net/ubuntu/+source/jhead/+bug/1858746
- https://security.gentoo.org/glsa/202007-17
- https://bugs.gentoo.org/711220#c3
- https://bugs.gentoo.org/876247#c0
- https://bugs.launchpad.net/ubuntu/+source/jhead/+bug/1858746
- https://security.gentoo.org/glsa/202007-17