CVE-2021-28275

Name of the Vulnerable Software and Affected Versions jhead versions 3.04 through 3.05

Description A Denial of Service issue exists due to a wild address read in the Get16u function in exif.c, which can cause a segmentation fault via a crafted file.

Recommendations For jhead version 3.04, update to a version that fixes the issue in the Get16u function. For jhead version 3.05, update to a version that fixes the issue in the Get16u function. As a temporary workaround, consider restricting access to the exif.c file or the Get16u function until a patch is available.