CVE-2020-28840

ALTO 7.8CVE-2020-28840 · Published 11/08/2023 · updated 17/06/2026

En resumen

CVE-2020-28840 es una vulnerabilidad ALTO (CVSS 7.8) que afecta a jhead (matthiaswandel).
Probabilidad de explotación en los próximos 30 días (EPSS): 0.36%, mayor que el 29.4% de las vulnerabilidades.
Solución: actualizar a 3.04 o posterior.

Package	Affected versions	Patched versions
jhead matthiaswandel	`< 3.04`	`3.04`

Description

Buffer Overflow vulnerability in jpgfile.c in Matthias-Wandel jhead version 3.04, allows local attackers to execute arbitrary code and cause a denial of service (DoS).

References

bugs.launchpad.net/ubuntu/+source/jhead/+bug/1900820 · Exploit
F-ZhaoYang/jhead security advisory · Exploit
Matthias-Wandel/jhead commit 4827ed3 · Patch
Matthias-Wandel/jhead · Exploit

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free