CVE-2021-28278: Jhead Project Jhead

High severity, CVSS 7.8. EPSS: 0.9% chance of exploitation in the next 30 days.

A Heap-based Buffer Overflow vulnerability exists in jhead 3.04 and 3.05 via the RemoveSectionType function in jpgfile.c.

Affected products

• Jhead Project Jhead: version 3.04 only; version 3.05 only

Published 2022-03-23. Last modified 2026-06-17.