CVE-2021-28275: Jhead Project Jhead

Medium severity, CVSS 5.5. EPSS: 0.7% chance of exploitation in the next 30 days.

A Denial of Service vulnerability exists in jhead 3.04 and 3.05 due to a wild address read in the Get16u function in exif.c in will cause segmentation fault via a crafted_file.

Affected products

• Jhead Project Jhead: version 3.04 only; version 3.05 only

Published 2022-03-23. Last modified 2026-06-17.