Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-vq3j-5p4r-99x3

Опубликовано: 14 мая 2022
Источник: github
Github: Не прошло ревью
CVSS3: 7.8

Описание

exif.c in Matthias Wandel jhead 2.87, as used in libjhead in Android 4.x before 4.4.4, 5.0.x before 5.0.2, 5.1.x before 5.1.1, and 6.x before 2016-08-01, allows remote attackers to execute arbitrary code or cause a denial of service (out-of-bounds access) via crafted EXIF data, aka internal bug 28868315.

exif.c in Matthias Wandel jhead 2.87, as used in libjhead in Android 4.x before 4.4.4, 5.0.x before 5.0.2, 5.1.x before 5.1.1, and 6.x before 2016-08-01, allows remote attackers to execute arbitrary code or cause a denial of service (out-of-bounds access) via crafted EXIF data, aka internal bug 28868315.

EPSS

Процентиль: 57%
0.00349
Низкий

7.8 High

CVSS3

Дефекты

CWE-119

Связанные уязвимости

CVSS3: 7.8
ubuntu
больше 9 лет назад

exif.c in Matthias Wandel jhead 2.87, as used in libjhead in Android 4.x before 4.4.4, 5.0.x before 5.0.2, 5.1.x before 5.1.1, and 6.x before 2016-08-01, allows remote attackers to execute arbitrary code or cause a denial of service (out-of-bounds access) via crafted EXIF data, aka internal bug 28868315.

CVSS3: 7.8
nvd
больше 9 лет назад

exif.c in Matthias Wandel jhead 2.87, as used in libjhead in Android 4.x before 4.4.4, 5.0.x before 5.0.2, 5.1.x before 5.1.1, and 6.x before 2016-08-01, allows remote attackers to execute arbitrary code or cause a denial of service (out-of-bounds access) via crafted EXIF data, aka internal bug 28868315.

CVSS3: 7.8
debian
больше 9 лет назад

exif.c in Matthias Wandel jhead 2.87, as used in libjhead in Android 4 ...

fstec
больше 9 лет назад

Уязвимость операционной системы Android, позволяющая нарушителю вызвать отказ в обслуживании или выполнить произвольный код

suse-cvrf
больше 7 лет назад

Security update for jhead

EPSS

Процентиль: 57%
0.00349
Низкий

7.8 High

CVSS3

Дефекты

CWE-119