CVE-2020-6624

jhead through 3.04 has a heap-based buffer over-read in process_DQT in jpgqguess.c.

Score

CVSS 3.1 7.1 High

Status

Modified - cve@mitre.org

Published

2020-01-09

Last modified

2024-08-04

Weaknesses

CWE-125

Affected products

• Jhead (Jhead Project)

References

• https://bugs.gentoo.org/711220#c3
• https://bugs.gentoo.org/876247#c0
• https://bugs.launchpad.net/ubuntu/+source/jhead/+bug/1858744
• https://security.gentoo.org/glsa/202007-17