CVE-2020-26208 - CVE House
Back to Database
Status published Medium CVE-2020-26208

Heap-buffer-overflow in jhead

Vulnerability Description

JHEAD is a simple command line tool for displaying and some manipulation of EXIF header data embedded in Jpeg images from digital cameras. In affected versions there is a heap-buffer-overflow on jhead-3.04/jpgfile.c:285 ReadJpegSections. Crafted jpeg images can be provided to the user resulting in a program crash or potentially incorrect exif information retrieval. Users are advised to upgrade. There is no known workaround for this issue.

Impact Analysis

Refer to official advisory for detailed impact metrics.

Remediation

Ensure systems are updated to the latest vendor-supplied patch levels.

THREAT MONITOR

Am I Vulnerable?

Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2020-26208

Credits & Attribution

No credits recorded in the NVD database.

References

More from jhead project

View All →
CVE-2022-41751
Jhead 3.06.0.1 allows attackers to execute arbitrary OS commands by...
Unknown 0
CVE-2022-28550
Matthias-Wandel/jhead jhead 3.06 is vulnerable to Buffer Overflow via shellescape(),...
Unknown 0
CVE-2021-34055
jhead 3.06 is vulnerable to Buffer Overflow via exif.c in...
Unknown 0
CVE-2021-28278
A Heap-based Buffer Overflow vulnerability exists in jhead 3.04 and...
High 7.8
CVE-2021-28277
A Heap-based Buffer Overflow vulnerabilty exists in jhead 3.04 and...
High 7.8

Affected Vendor

jhead project

View all reports →

Affected Software

jhead
Vulnerable Versions:
0

Timeline

Official Publish: February 2nd, 2022
Last Modified: May 5th, 2025
Added to House: July 21st, 2026

CVSS Vectors

V3: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L

Weaknesses (CWE)

No CWE data available

MITRE ATT&CK TTPs

No associated TTPs found for this vulnerability.