CVE-2021-28277: Jhead Project Jhead

High severity, CVSS 7.8. EPSS: 0.9% chance of exploitation in the next 30 days.

A Heap-based Buffer Overflow vulnerabilty exists in jhead 3.04 and 3.05 is affected by: Buffer Overflow via the RemoveUnknownSections function in jpgfile.c.

Affected products

• Jhead Project Jhead: version 3.04 only; version 3.05 only

Published 2022-03-23. Last modified 2026-06-17.