CVE-2021-28276: Jhead Project Jhead

High severity, CVSS 7.5. EPSS: 1.1% chance of exploitation in the next 30 days.

A Denial of Service vulnerability exists in jhead 3.04 and 3.05 via a wild address read in the ProcessCanonMakerNoteDir function in makernote.c.

Affected products

• Jhead Project Jhead: version 3.04 only; version 3.05 only

Published 2022-03-23. Last modified 2026-06-17.