CVE-2020-6624: Jhead Project Jhead

High severity, CVSS 7.1. EPSS: 1.4% chance of exploitation in the next 30 days.

jhead through 3.04 has a heap-based buffer over-read in process_DQT in jpgqguess.c.

Affected products

• Jhead Project Jhead: up to and including 3.04

Published 2020-01-09. Last modified 2026-06-17.