jhead vulnerabilities
CVEs whose affected-version data names the jhead package. Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.
2 CVEsRSS
CVE-2026-90682Medium· 5.3PoCA security vulnerability has been detected in Matthias-Wandel jhead up to 3.3
A security vulnerability has been detected in Matthias-Wandel jhead up to 3.3. This impacts the function ProcessGpsInfo of the file gpsinfo.c of the component WebP EXIF Handler. Such manipulation of the argument TAG_GPS_LAT/TAG_GPS_LONG …
▾ TwilightMatthias-Wandel · jheadEPSS 0.12%via NVD
CVE-2026-90681Low· 3.3PoCA weakness has been identified in Matthias-Wandel jhead up to 3.3
A weakness has been identified in Matthias-Wandel jhead up to 3.3. This affects the function Get16u of the file exif.c of the component EXIF Parsing. This manipulation causes out-of-bounds read. The attack requires local access. The expl…
▾ TwilightMatthias-Wandel · jheadEPSS 0.11%via NVD