CVE-2019-19035: Jhead Project Jhead

Medium severity, CVSS 5.5. EPSS: 1% chance of exploitation in the next 30 days.

jhead 3.03 is affected by: heap-based buffer over-read. The impact is: Denial of service. The component is: ReadJpegSections and process_SOFn in jpgfile.c. The attack vector is: Open a specially crafted JPEG file.

Affected products

• Jhead Project Jhead: version 3.03 only

Published 2019-11-17. Last modified 2026-06-17.