CVE-2026-90682

Name of the Vulnerable Software and Affected Versions Matthias-Wandel jhead versions prior to 3.4

Description A heap-based buffer overflow exists in the WebP EXIF Handler component within the ProcessGpsInfo() function of the gpsinfo.c file. This issue occurs when the TAG GPS LAT or TAG GPS LONG arguments are manipulated, requiring local access to execute. A heap-based buffer overflow is a condition where a program writes more data to a heap memory buffer than it can hold, potentially leading to crashes or arbitrary code execution.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.