Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-vq3j-5p4r-99x3

Опубликовано: 14 мая 2022
Источник: github
Github: Не прошло ревью
CVSS3: 7.8

Описание

exif.c in Matthias Wandel jhead 2.87, as used in libjhead in Android 4.x before 4.4.4, 5.0.x before 5.0.2, 5.1.x before 5.1.1, and 6.x before 2016-08-01, allows remote attackers to execute arbitrary code or cause a denial of service (out-of-bounds access) via crafted EXIF data, aka internal bug 28868315.

exif.c in Matthias Wandel jhead 2.87, as used in libjhead in Android 4.x before 4.4.4, 5.0.x before 5.0.2, 5.1.x before 5.1.1, and 6.x before 2016-08-01, allows remote attackers to execute arbitrary code or cause a denial of service (out-of-bounds access) via crafted EXIF data, aka internal bug 28868315.

EPSS

Процентиль: 68%
0.01267
Низкий

7.8 High

CVSS3

Дефекты

CWE-119

Связанные уязвимости

CVSS3: 7.8
ubuntu
около 10 лет назад

exif.c in Matthias Wandel jhead 2.87, as used in libjhead in Android 4.x before 4.4.4, 5.0.x before 5.0.2, 5.1.x before 5.1.1, and 6.x before 2016-08-01, allows remote attackers to execute arbitrary code or cause a denial of service (out-of-bounds access) via crafted EXIF data, aka internal bug 28868315.

CVSS3: 7.8
nvd
около 10 лет назад

exif.c in Matthias Wandel jhead 2.87, as used in libjhead in Android 4.x before 4.4.4, 5.0.x before 5.0.2, 5.1.x before 5.1.1, and 6.x before 2016-08-01, allows remote attackers to execute arbitrary code or cause a denial of service (out-of-bounds access) via crafted EXIF data, aka internal bug 28868315.

CVSS3: 7.8
debian
около 10 лет назад

exif.c in Matthias Wandel jhead 2.87, as used in libjhead in Android 4 ...

fstec
около 10 лет назад

Уязвимость операционной системы Android, позволяющая нарушителю вызвать отказ в обслуживании или выполнить произвольный код

suse-cvrf
почти 8 лет назад

Security update for jhead

EPSS

Процентиль: 68%
0.01267
Низкий

7.8 High

CVSS3

Дефекты

CWE-119