CVE-2022-28550: Buffer Overflow
Matthias-Wandel/jhead jhead 3.06 is vulnerable to Buffer Overflow via shellescape(), jhead.c, jhead. jhead copies strings to a stack buffer when it detects a &i or &o. However, jhead does not check the boundary of the stack buffer. As a result, there will be a stack buffer overflow problem when multiple &i or &o are given.
Affected Software
Remediation
Patch Available
Event History
Frequently Asked Questions
What is CVE-2022-28550?
CVE-2022-28550 is a vulnerability found in jhead 3.06, a software library used for manipulating and editing JPEG files.
How severe is CVE-2022-28550?
CVE-2022-28550 has a severity rating of 9.8, which is considered critical.
What is the affected software version?
The affected software version is jhead 3.06.
What is the vulnerability in CVE-2022-28550?
The vulnerability in CVE-2022-28550 is a buffer overflow issue in the shellescape() function of the jhead.c file in jhead.
Are there any references related to CVE-2022-28550?
Yes, there are references available for CVE-2022-28550. You can find them at the following links: [link1](https://github.com/Matthias-Wandel/jhead/commit/64894dbc7d8e1e232e85f1cab25c64290b2fc167) and [link2](https://github.com/Matthias-Wandel/jhead/issues/51).