CVE-2020-6624: High severity Jhead Project Jhead vulnerability
Published Jan 9, 2020
·Updated
jhead through 3.04 has a heap-based buffer over-read in processDQT in jpgqguess.c.
Affected Software
1 affected component
Jhead Project Jhead<=3.04
Event History
Jan 9, 2020
CVE Published
via MITRE·12:00 AM
Data Sourced
via MITRE·12:00 AM
Description
Data Sourced
via NVD·01:15 AM
DescriptionSeverityWeaknessAffected Software
Frequently Asked Questions
1
What is CVE-2020-6624?
CVE-2020-6624 is a vulnerability in jhead through 3.04 that causes a heap-based buffer over-read in the process_DQT function in jpgqguess.c.
2
How severe is CVE-2020-6624?
CVE-2020-6624 has a severity score of 7.1, which is considered high.
3
Which software versions are affected by CVE-2020-6624?
Software versions up to and including 3.04 of the Jhead Project's jhead tool are affected by CVE-2020-6624.
4
What is the Common Weakness Enumeration (CWE) ID for CVE-2020-6624?
The Common Weakness Enumeration (CWE) ID for CVE-2020-6624 is 125.
5
How can I fix CVE-2020-6624?
To fix CVE-2020-6624, it is recommended to upgrade to a version of jhead that is higher than 3.04.