Search
Find a vulnerability
Search criteria
ⓘ
Use this form to refine search results.
Full-text search supports keyword queries with ranking and filtering.
You can combine vendor, product, and sources to narrow results.
Enable “Apply ordering” to sort by date instead of relevance.
6 vulnerabilities by Matthias-Wandel
CVE-2026-90682 (GCVE-0-2026-90682)
Vulnerability from nvd – Published: 2026-09-14 04:30 – Updated: 2026-09-15 13:58
VLAI
EPSS
VEX
Title
Matthias-Wandel jhead WebP EXIF gpsinfo.c ProcessGpsInfo heap-based overflow
Summary
A security vulnerability has been detected in Matthias-Wandel jhead up to 3.3. This impacts the function ProcessGpsInfo of the file gpsinfo.c of the component WebP EXIF Handler. Such manipulation of the argument TAG_GPS_LAT/TAG_GPS_LONG leads to heap-based buffer overflow. An attack has to be approached locally. The exploit has been disclosed publicly and may be used. The project was informed of the problem early through an issue report but has not responded yet.
Severity
SSVC
Exploitation: poc
Automatable: no
Technical Impact: partial
CISA Coordinator · CISA-ADP (v2.0.3)
Decision recorded 2026-09-15 13:42 UTC
Assigner
References
7 references
| URL | Tags |
|---|---|
| https://vuldb.com/vuln/403215 | vdb-entrytechnical-description |
| https://vuldb.com/vuln/403215/cti | signaturepermissions-required |
| https://vuldb.com/cve/CVE-2026-90682 | third-party-advisory |
| https://vuldb.com/submit/914948 | third-party-advisory |
| https://github.com/Matthias-Wandel/jhead/issues/99 | issue-tracking |
| https://github.com/user-attachments/files/3039709… | exploit |
| https://github.com/Matthias-Wandel/jhead/ | product |
Impacted products
1 product
| Vendor | Product | Version | |
|---|---|---|---|
| Matthias-Wandel | jhead |
Affected:
3.0
Affected: 3.1 Affected: 3.2 Affected: 3.3 cpe:2.3:a:matthias-wandel:jhead:*:*:*:*:*:*:*:* |
{
"containers": {
"adp": [
{
"metrics": [
{
"other": {
"content": {
"id": "CVE-2026-90682",
"options": [
{
"Exploitation": "poc"
},
{
"Automatable": "no"
},
{
"Technical Impact": "partial"
}
],
"role": "CISA Coordinator",
"timestamp": "2026-09-15T13:42:15.336258Z",
"version": "2.0.3"
},
"type": "ssvc"
}
}
],
"providerMetadata": {
"dateUpdated": "2026-09-15T13:58:11.023Z",
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"shortName": "CISA-ADP"
},
"title": "CISA ADP Vulnrichment"
}
],
"cna": {
"affected": [
{
"cpes": [
"cpe:2.3:a:matthias-wandel:jhead:*:*:*:*:*:*:*:*"
],
"modules": [
"WebP EXIF Handler"
],
"product": "jhead",
"vendor": "Matthias-Wandel",
"versions": [
{
"status": "affected",
"version": "3.0"
},
{
"status": "affected",
"version": "3.1"
},
{
"status": "affected",
"version": "3.2"
},
{
"status": "affected",
"version": "3.3"
}
]
}
],
"credits": [
{
"lang": "en",
"type": "reporter",
"value": "fczhang (VulDB User)"
},
{
"lang": "en",
"type": "coordinator",
"value": "VulDB CNA Team"
}
],
"descriptions": [
{
"lang": "en",
"value": "A security vulnerability has been detected in Matthias-Wandel jhead up to 3.3. This impacts the function ProcessGpsInfo of the file gpsinfo.c of the component WebP EXIF Handler. Such manipulation of the argument TAG_GPS_LAT/TAG_GPS_LONG leads to heap-based buffer overflow. An attack has to be approached locally. The exploit has been disclosed publicly and may be used. The project was informed of the problem early through an issue report but has not responded yet."
}
],
"metrics": [
{
"cvssV4_0": {
"baseScore": 4.8,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P",
"version": "4.0"
}
},
{
"cvssV3_1": {
"baseScore": 5.3,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L/E:P/RL:X/RC:R",
"version": "3.1"
}
},
{
"cvssV3_0": {
"baseScore": 5.3,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L/E:P/RL:X/RC:R",
"version": "3.0"
}
},
{
"cvssV2_0": {
"baseScore": 4.3,
"vectorString": "AV:L/AC:L/Au:S/C:P/I:P/A:P/E:POC/RL:ND/RC:UR",
"version": "2.0"
}
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-122",
"description": "Heap-based Buffer Overflow",
"lang": "en",
"type": "CWE"
}
]
},
{
"descriptions": [
{
"cweId": "CWE-119",
"description": "Memory Corruption",
"lang": "en",
"type": "CWE"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2026-09-14T04:30:16.031Z",
"orgId": "1af790b2-7ee1-4545-860a-a788eba489b5",
"shortName": "VulDB"
},
"references": [
{
"name": "VDB-403215 | Matthias-Wandel jhead WebP EXIF gpsinfo.c ProcessGpsInfo heap-based overflow",
"tags": [
"vdb-entry",
"technical-description"
],
"url": "https://vuldb.com/vuln/403215"
},
{
"name": "VDB-403215 | CTI Indicators (IOB, IOC, IOA)",
"tags": [
"signature",
"permissions-required"
],
"url": "https://vuldb.com/vuln/403215/cti"
},
{
"name": "CVE-2026-90682 | CVE Analysis and Report",
"tags": [
"third-party-advisory"
],
"url": "https://vuldb.com/cve/CVE-2026-90682"
},
{
"name": "Submit #914948 | Matthias-Wandel jhead v3.3 (commit 5007491, 3.08-66-g5007491) heap-buffer-overflow (Get32u)",
"tags": [
"third-party-advisory"
],
"url": "https://vuldb.com/submit/914948"
},
{
"tags": [
"issue-tracking"
],
"url": "https://github.com/Matthias-Wandel/jhead/issues/99"
},
{
"tags": [
"exploit"
],
"url": "https://github.com/user-attachments/files/30397094/poc.zip"
},
{
"tags": [
"product"
],
"url": "https://github.com/Matthias-Wandel/jhead/"
}
],
"timeline": [
{
"lang": "en",
"time": "2026-09-13T00:00:00.000Z",
"value": "Advisory disclosed"
},
{
"lang": "en",
"time": "2026-09-13T02:00:00.000Z",
"value": "VulDB entry created"
},
{
"lang": "en",
"time": "2026-09-13T06:53:27.000Z",
"value": "VulDB entry last update"
}
],
"title": "Matthias-Wandel jhead WebP EXIF gpsinfo.c ProcessGpsInfo heap-based overflow",
"x_generator": [
"VulDB PVTS v202609"
]
}
},
"cveMetadata": {
"assignerOrgId": "1af790b2-7ee1-4545-860a-a788eba489b5",
"assignerShortName": "VulDB",
"cveId": "CVE-2026-90682",
"datePublished": "2026-09-14T04:30:16.031Z",
"dateReserved": "2026-09-13T04:47:53.206Z",
"dateUpdated": "2026-09-15T13:58:11.023Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.2"
}
CVE-2026-90681 (GCVE-0-2026-90681)
Vulnerability from nvd – Published: 2026-09-14 04:15 – Updated: 2026-09-14 14:58
VLAI
EPSS
VEX
Title
Matthias-Wandel jhead EXIF Parsing exif.c Get16u out-of-bounds
Summary
A weakness has been identified in Matthias-Wandel jhead up to 3.3. This affects the function Get16u of the file exif.c of the component EXIF Parsing. This manipulation causes out-of-bounds read. The attack requires local access. The exploit has been made available to the public and could be used for attacks. The project was informed of the problem early through an issue report but has not responded yet.
Severity
SSVC
Exploitation: poc
Automatable: no
Technical Impact: partial
CISA Coordinator · CISA-ADP (v2.0.3)
Decision recorded 2026-09-14 14:58 UTC
Assigner
References
7 references
| URL | Tags |
|---|---|
| https://vuldb.com/vuln/403214 | vdb-entrytechnical-description |
| https://vuldb.com/vuln/403214/cti | signaturepermissions-required |
| https://vuldb.com/cve/CVE-2026-90681 | third-party-advisory |
| https://vuldb.com/submit/914946 | third-party-advisory |
| https://github.com/Matthias-Wandel/jhead/issues/98 | issue-tracking |
| https://github.com/user-attachments/files/3039705… | exploit |
| https://github.com/Matthias-Wandel/jhead/ | product |
Impacted products
1 product
| Vendor | Product | Version | |
|---|---|---|---|
| Matthias-Wandel | jhead |
Affected:
3.0
Affected: 3.1 Affected: 3.2 Affected: 3.3 cpe:2.3:a:matthias-wandel:jhead:*:*:*:*:*:*:*:* |
{
"containers": {
"adp": [
{
"metrics": [
{
"other": {
"content": {
"id": "CVE-2026-90681",
"options": [
{
"Exploitation": "poc"
},
{
"Automatable": "no"
},
{
"Technical Impact": "partial"
}
],
"role": "CISA Coordinator",
"timestamp": "2026-09-14T14:58:48.003722Z",
"version": "2.0.3"
},
"type": "ssvc"
}
}
],
"providerMetadata": {
"dateUpdated": "2026-09-14T14:58:58.979Z",
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"shortName": "CISA-ADP"
},
"title": "CISA ADP Vulnrichment"
}
],
"cna": {
"affected": [
{
"cpes": [
"cpe:2.3:a:matthias-wandel:jhead:*:*:*:*:*:*:*:*"
],
"modules": [
"EXIF Parsing"
],
"product": "jhead",
"vendor": "Matthias-Wandel",
"versions": [
{
"status": "affected",
"version": "3.0"
},
{
"status": "affected",
"version": "3.1"
},
{
"status": "affected",
"version": "3.2"
},
{
"status": "affected",
"version": "3.3"
}
]
}
],
"credits": [
{
"lang": "en",
"type": "reporter",
"value": "fczhang (VulDB User)"
},
{
"lang": "en",
"type": "coordinator",
"value": "VulDB CNA Team"
}
],
"descriptions": [
{
"lang": "en",
"value": "A weakness has been identified in Matthias-Wandel jhead up to 3.3. This affects the function Get16u of the file exif.c of the component EXIF Parsing. This manipulation causes out-of-bounds read. The attack requires local access. The exploit has been made available to the public and could be used for attacks. The project was informed of the problem early through an issue report but has not responded yet."
}
],
"metrics": [
{
"cvssV4_0": {
"baseScore": 4.8,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:P",
"version": "4.0"
}
},
{
"cvssV3_1": {
"baseScore": 3.3,
"baseSeverity": "LOW",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L/E:P/RL:X/RC:R",
"version": "3.1"
}
},
{
"cvssV3_0": {
"baseScore": 3.3,
"baseSeverity": "LOW",
"vectorString": "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L/E:P/RL:X/RC:R",
"version": "3.0"
}
},
{
"cvssV2_0": {
"baseScore": 1.7,
"vectorString": "AV:L/AC:L/Au:S/C:N/I:N/A:P/E:POC/RL:ND/RC:UR",
"version": "2.0"
}
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-125",
"description": "Out-of-Bounds Read",
"lang": "en",
"type": "CWE"
}
]
},
{
"descriptions": [
{
"cweId": "CWE-119",
"description": "Memory Corruption",
"lang": "en",
"type": "CWE"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2026-09-14T04:15:11.640Z",
"orgId": "1af790b2-7ee1-4545-860a-a788eba489b5",
"shortName": "VulDB"
},
"references": [
{
"name": "VDB-403214 | Matthias-Wandel jhead EXIF Parsing exif.c Get16u out-of-bounds",
"tags": [
"vdb-entry",
"technical-description"
],
"url": "https://vuldb.com/vuln/403214"
},
{
"name": "VDB-403214 | CTI Indicators (IOB, IOC, IOA)",
"tags": [
"signature",
"permissions-required"
],
"url": "https://vuldb.com/vuln/403214/cti"
},
{
"name": "CVE-2026-90681 | CVE Analysis and Report",
"tags": [
"third-party-advisory"
],
"url": "https://vuldb.com/cve/CVE-2026-90681"
},
{
"name": "Submit #914946 | Matthias-Wandel jhead v3.3 (commit 5007491, 3.08-66-g5007491) heap-buffer-overflow (Get16u)",
"tags": [
"third-party-advisory"
],
"url": "https://vuldb.com/submit/914946"
},
{
"tags": [
"issue-tracking"
],
"url": "https://github.com/Matthias-Wandel/jhead/issues/98"
},
{
"tags": [
"exploit"
],
"url": "https://github.com/user-attachments/files/30397052/poc.zip"
},
{
"tags": [
"product"
],
"url": "https://github.com/Matthias-Wandel/jhead/"
}
],
"timeline": [
{
"lang": "en",
"time": "2026-09-13T00:00:00.000Z",
"value": "Advisory disclosed"
},
{
"lang": "en",
"time": "2026-09-13T02:00:00.000Z",
"value": "VulDB entry created"
},
{
"lang": "en",
"time": "2026-09-13T06:53:24.000Z",
"value": "VulDB entry last update"
}
],
"title": "Matthias-Wandel jhead EXIF Parsing exif.c Get16u out-of-bounds",
"x_generator": [
"VulDB PVTS v202609"
]
}
},
"cveMetadata": {
"assignerOrgId": "1af790b2-7ee1-4545-860a-a788eba489b5",
"assignerShortName": "VulDB",
"cveId": "CVE-2026-90681",
"datePublished": "2026-09-14T04:15:11.640Z",
"dateReserved": "2026-09-13T04:47:43.651Z",
"dateUpdated": "2026-09-14T14:58:58.979Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.2"
}
CVE-2024-2824 (GCVE-0-2024-2824)
Vulnerability from nvd – Published: 2024-03-22 18:00 – Updated: 2024-08-01 20:47
VLAI
EPSS
VEX
Title
Matthias-Wandel jhead exif.c PrintFormatNumber heap-based overflow
Summary
A vulnerability was found in Matthias-Wandel jhead 3.08 and classified as critical. This issue affects the function PrintFormatNumber of the file exif.c. The manipulation leads to heap-based buffer overflow. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-257711.
Severity
6.3 (Medium)
6.3 (Medium)
SSVC
Exploitation: poc
Automatable: no
Technical Impact: partial
CISA Coordinator · CISA-ADP (v2.0.3)
Decision recorded 2024-08-01 20:46 UTC
CWE
- CWE-122 - Heap-based Buffer Overflow
Assigner
References
4 references
| URL | Tags |
|---|---|
| https://vuldb.com/?id.257711 | vdb-entrytechnical-description |
| https://vuldb.com/?ctiid.257711 | signaturepermissions-required |
| https://github.com/Matthias-Wandel/jhead/issues/84 | issue-tracking |
| https://github.com/Matthias-Wandel/jhead/files/14… | exploit |
Impacted products
2 products
| Vendor | Product | Version | |
|---|---|---|---|
| Matthias-Wandel | jhead |
Affected:
3.08
|
|
| jhead_project | jhead |
Affected:
3.08
cpe:2.3:a:jhead_project:jhead:3.08:*:*:*:*:*:*:* |
{
"containers": {
"adp": [
{
"providerMetadata": {
"dateUpdated": "2024-08-01T19:25:42.146Z",
"orgId": "af854a3a-2127-422b-91ae-364da2661108",
"shortName": "CVE"
},
"references": [
{
"name": "VDB-257711 | Matthias-Wandel jhead exif.c PrintFormatNumber heap-based overflow",
"tags": [
"vdb-entry",
"technical-description",
"x_transferred"
],
"url": "https://vuldb.com/?id.257711"
},
{
"name": "VDB-257711 | CTI Indicators (IOB, IOC, IOA)",
"tags": [
"signature",
"permissions-required",
"x_transferred"
],
"url": "https://vuldb.com/?ctiid.257711"
},
{
"tags": [
"issue-tracking",
"x_transferred"
],
"url": "https://github.com/Matthias-Wandel/jhead/issues/84"
},
{
"tags": [
"exploit",
"x_transferred"
],
"url": "https://github.com/Matthias-Wandel/jhead/files/14613084/poc.zip"
}
],
"title": "CVE Program Container"
},
{
"affected": [
{
"cpes": [
"cpe:2.3:a:jhead_project:jhead:3.08:*:*:*:*:*:*:*"
],
"defaultStatus": "unknown",
"product": "jhead",
"vendor": "jhead_project",
"versions": [
{
"status": "affected",
"version": "3.08"
}
]
}
],
"metrics": [
{
"other": {
"content": {
"id": "CVE-2024-2824",
"options": [
{
"Exploitation": "poc"
},
{
"Automatable": "no"
},
{
"Technical Impact": "partial"
}
],
"role": "CISA Coordinator",
"timestamp": "2024-08-01T20:46:02.059659Z",
"version": "2.0.3"
},
"type": "ssvc"
}
}
],
"providerMetadata": {
"dateUpdated": "2024-08-01T20:47:22.904Z",
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"shortName": "CISA-ADP"
},
"title": "CISA ADP Vulnrichment"
}
],
"cna": {
"affected": [
{
"product": "jhead",
"vendor": "Matthias-Wandel",
"versions": [
{
"status": "affected",
"version": "3.08"
}
]
}
],
"credits": [
{
"lang": "en",
"type": "reporter",
"value": "merci (VulDB User)"
}
],
"descriptions": [
{
"lang": "en",
"value": "A vulnerability was found in Matthias-Wandel jhead 3.08 and classified as critical. This issue affects the function PrintFormatNumber of the file exif.c. The manipulation leads to heap-based buffer overflow. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-257711."
},
{
"lang": "de",
"value": "Eine kritische Schwachstelle wurde in Matthias-Wandel jhead 3.08 gefunden. Es geht hierbei um die Funktion PrintFormatNumber der Datei exif.c. Durch die Manipulation mit unbekannten Daten kann eine heap-based buffer overflow-Schwachstelle ausgenutzt werden. Der Angriff kann \u00fcber das Netzwerk angegangen werden. Der Exploit steht zur \u00f6ffentlichen Verf\u00fcgung."
}
],
"metrics": [
{
"cvssV3_1": {
"baseScore": 6.3,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L",
"version": "3.1"
}
},
{
"cvssV3_0": {
"baseScore": 6.3,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L",
"version": "3.0"
}
},
{
"cvssV2_0": {
"baseScore": 7.5,
"vectorString": "AV:N/AC:L/Au:N/C:P/I:P/A:P",
"version": "2.0"
}
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-122",
"description": "CWE-122 Heap-based Buffer Overflow",
"lang": "en",
"type": "CWE"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2024-03-22T18:00:08.695Z",
"orgId": "1af790b2-7ee1-4545-860a-a788eba489b5",
"shortName": "VulDB"
},
"references": [
{
"name": "VDB-257711 | Matthias-Wandel jhead exif.c PrintFormatNumber heap-based overflow",
"tags": [
"vdb-entry",
"technical-description"
],
"url": "https://vuldb.com/?id.257711"
},
{
"name": "VDB-257711 | CTI Indicators (IOB, IOC, IOA)",
"tags": [
"signature",
"permissions-required"
],
"url": "https://vuldb.com/?ctiid.257711"
},
{
"tags": [
"issue-tracking"
],
"url": "https://github.com/Matthias-Wandel/jhead/issues/84"
},
{
"tags": [
"exploit"
],
"url": "https://github.com/Matthias-Wandel/jhead/files/14613084/poc.zip"
}
],
"timeline": [
{
"lang": "en",
"time": "2024-03-22T00:00:00.000Z",
"value": "Advisory disclosed"
},
{
"lang": "en",
"time": "2024-03-22T01:00:00.000Z",
"value": "VulDB entry created"
},
{
"lang": "en",
"time": "2024-03-22T11:45:37.000Z",
"value": "VulDB entry last update"
}
],
"title": "Matthias-Wandel jhead exif.c PrintFormatNumber heap-based overflow"
}
},
"cveMetadata": {
"assignerOrgId": "1af790b2-7ee1-4545-860a-a788eba489b5",
"assignerShortName": "VulDB",
"cveId": "CVE-2024-2824",
"datePublished": "2024-03-22T18:00:08.695Z",
"dateReserved": "2024-03-22T10:39:58.777Z",
"dateUpdated": "2024-08-01T20:47:22.904Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.1"
}
CVE-2026-90682 (GCVE-0-2026-90682)
Vulnerability from cvelistv5 – Published: 2026-09-14 04:30 – Updated: 2026-09-15 13:58
VLAI
EPSS
VEX
Title
Matthias-Wandel jhead WebP EXIF gpsinfo.c ProcessGpsInfo heap-based overflow
Summary
A security vulnerability has been detected in Matthias-Wandel jhead up to 3.3. This impacts the function ProcessGpsInfo of the file gpsinfo.c of the component WebP EXIF Handler. Such manipulation of the argument TAG_GPS_LAT/TAG_GPS_LONG leads to heap-based buffer overflow. An attack has to be approached locally. The exploit has been disclosed publicly and may be used. The project was informed of the problem early through an issue report but has not responded yet.
Severity
SSVC
Exploitation: poc
Automatable: no
Technical Impact: partial
CISA Coordinator · CISA-ADP (v2.0.3)
Decision recorded 2026-09-15 13:42 UTC
Assigner
References
7 references
| URL | Tags |
|---|---|
| https://vuldb.com/vuln/403215 | vdb-entrytechnical-description |
| https://vuldb.com/vuln/403215/cti | signaturepermissions-required |
| https://vuldb.com/cve/CVE-2026-90682 | third-party-advisory |
| https://vuldb.com/submit/914948 | third-party-advisory |
| https://github.com/Matthias-Wandel/jhead/issues/99 | issue-tracking |
| https://github.com/user-attachments/files/3039709… | exploit |
| https://github.com/Matthias-Wandel/jhead/ | product |
Impacted products
1 product
| Vendor | Product | Version | |
|---|---|---|---|
| Matthias-Wandel | jhead |
Affected:
3.0
Affected: 3.1 Affected: 3.2 Affected: 3.3 cpe:2.3:a:matthias-wandel:jhead:*:*:*:*:*:*:*:* |
{
"containers": {
"adp": [
{
"metrics": [
{
"other": {
"content": {
"id": "CVE-2026-90682",
"options": [
{
"Exploitation": "poc"
},
{
"Automatable": "no"
},
{
"Technical Impact": "partial"
}
],
"role": "CISA Coordinator",
"timestamp": "2026-09-15T13:42:15.336258Z",
"version": "2.0.3"
},
"type": "ssvc"
}
}
],
"providerMetadata": {
"dateUpdated": "2026-09-15T13:58:11.023Z",
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"shortName": "CISA-ADP"
},
"title": "CISA ADP Vulnrichment"
}
],
"cna": {
"affected": [
{
"cpes": [
"cpe:2.3:a:matthias-wandel:jhead:*:*:*:*:*:*:*:*"
],
"modules": [
"WebP EXIF Handler"
],
"product": "jhead",
"vendor": "Matthias-Wandel",
"versions": [
{
"status": "affected",
"version": "3.0"
},
{
"status": "affected",
"version": "3.1"
},
{
"status": "affected",
"version": "3.2"
},
{
"status": "affected",
"version": "3.3"
}
]
}
],
"credits": [
{
"lang": "en",
"type": "reporter",
"value": "fczhang (VulDB User)"
},
{
"lang": "en",
"type": "coordinator",
"value": "VulDB CNA Team"
}
],
"descriptions": [
{
"lang": "en",
"value": "A security vulnerability has been detected in Matthias-Wandel jhead up to 3.3. This impacts the function ProcessGpsInfo of the file gpsinfo.c of the component WebP EXIF Handler. Such manipulation of the argument TAG_GPS_LAT/TAG_GPS_LONG leads to heap-based buffer overflow. An attack has to be approached locally. The exploit has been disclosed publicly and may be used. The project was informed of the problem early through an issue report but has not responded yet."
}
],
"metrics": [
{
"cvssV4_0": {
"baseScore": 4.8,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P",
"version": "4.0"
}
},
{
"cvssV3_1": {
"baseScore": 5.3,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L/E:P/RL:X/RC:R",
"version": "3.1"
}
},
{
"cvssV3_0": {
"baseScore": 5.3,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L/E:P/RL:X/RC:R",
"version": "3.0"
}
},
{
"cvssV2_0": {
"baseScore": 4.3,
"vectorString": "AV:L/AC:L/Au:S/C:P/I:P/A:P/E:POC/RL:ND/RC:UR",
"version": "2.0"
}
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-122",
"description": "Heap-based Buffer Overflow",
"lang": "en",
"type": "CWE"
}
]
},
{
"descriptions": [
{
"cweId": "CWE-119",
"description": "Memory Corruption",
"lang": "en",
"type": "CWE"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2026-09-14T04:30:16.031Z",
"orgId": "1af790b2-7ee1-4545-860a-a788eba489b5",
"shortName": "VulDB"
},
"references": [
{
"name": "VDB-403215 | Matthias-Wandel jhead WebP EXIF gpsinfo.c ProcessGpsInfo heap-based overflow",
"tags": [
"vdb-entry",
"technical-description"
],
"url": "https://vuldb.com/vuln/403215"
},
{
"name": "VDB-403215 | CTI Indicators (IOB, IOC, IOA)",
"tags": [
"signature",
"permissions-required"
],
"url": "https://vuldb.com/vuln/403215/cti"
},
{
"name": "CVE-2026-90682 | CVE Analysis and Report",
"tags": [
"third-party-advisory"
],
"url": "https://vuldb.com/cve/CVE-2026-90682"
},
{
"name": "Submit #914948 | Matthias-Wandel jhead v3.3 (commit 5007491, 3.08-66-g5007491) heap-buffer-overflow (Get32u)",
"tags": [
"third-party-advisory"
],
"url": "https://vuldb.com/submit/914948"
},
{
"tags": [
"issue-tracking"
],
"url": "https://github.com/Matthias-Wandel/jhead/issues/99"
},
{
"tags": [
"exploit"
],
"url": "https://github.com/user-attachments/files/30397094/poc.zip"
},
{
"tags": [
"product"
],
"url": "https://github.com/Matthias-Wandel/jhead/"
}
],
"timeline": [
{
"lang": "en",
"time": "2026-09-13T00:00:00.000Z",
"value": "Advisory disclosed"
},
{
"lang": "en",
"time": "2026-09-13T02:00:00.000Z",
"value": "VulDB entry created"
},
{
"lang": "en",
"time": "2026-09-13T06:53:27.000Z",
"value": "VulDB entry last update"
}
],
"title": "Matthias-Wandel jhead WebP EXIF gpsinfo.c ProcessGpsInfo heap-based overflow",
"x_generator": [
"VulDB PVTS v202609"
]
}
},
"cveMetadata": {
"assignerOrgId": "1af790b2-7ee1-4545-860a-a788eba489b5",
"assignerShortName": "VulDB",
"cveId": "CVE-2026-90682",
"datePublished": "2026-09-14T04:30:16.031Z",
"dateReserved": "2026-09-13T04:47:53.206Z",
"dateUpdated": "2026-09-15T13:58:11.023Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.2"
}
CVE-2026-90681 (GCVE-0-2026-90681)
Vulnerability from cvelistv5 – Published: 2026-09-14 04:15 – Updated: 2026-09-14 14:58
VLAI
EPSS
VEX
Title
Matthias-Wandel jhead EXIF Parsing exif.c Get16u out-of-bounds
Summary
A weakness has been identified in Matthias-Wandel jhead up to 3.3. This affects the function Get16u of the file exif.c of the component EXIF Parsing. This manipulation causes out-of-bounds read. The attack requires local access. The exploit has been made available to the public and could be used for attacks. The project was informed of the problem early through an issue report but has not responded yet.
Severity
SSVC
Exploitation: poc
Automatable: no
Technical Impact: partial
CISA Coordinator · CISA-ADP (v2.0.3)
Decision recorded 2026-09-14 14:58 UTC
Assigner
References
7 references
| URL | Tags |
|---|---|
| https://vuldb.com/vuln/403214 | vdb-entrytechnical-description |
| https://vuldb.com/vuln/403214/cti | signaturepermissions-required |
| https://vuldb.com/cve/CVE-2026-90681 | third-party-advisory |
| https://vuldb.com/submit/914946 | third-party-advisory |
| https://github.com/Matthias-Wandel/jhead/issues/98 | issue-tracking |
| https://github.com/user-attachments/files/3039705… | exploit |
| https://github.com/Matthias-Wandel/jhead/ | product |
Impacted products
1 product
| Vendor | Product | Version | |
|---|---|---|---|
| Matthias-Wandel | jhead |
Affected:
3.0
Affected: 3.1 Affected: 3.2 Affected: 3.3 cpe:2.3:a:matthias-wandel:jhead:*:*:*:*:*:*:*:* |
{
"containers": {
"adp": [
{
"metrics": [
{
"other": {
"content": {
"id": "CVE-2026-90681",
"options": [
{
"Exploitation": "poc"
},
{
"Automatable": "no"
},
{
"Technical Impact": "partial"
}
],
"role": "CISA Coordinator",
"timestamp": "2026-09-14T14:58:48.003722Z",
"version": "2.0.3"
},
"type": "ssvc"
}
}
],
"providerMetadata": {
"dateUpdated": "2026-09-14T14:58:58.979Z",
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"shortName": "CISA-ADP"
},
"title": "CISA ADP Vulnrichment"
}
],
"cna": {
"affected": [
{
"cpes": [
"cpe:2.3:a:matthias-wandel:jhead:*:*:*:*:*:*:*:*"
],
"modules": [
"EXIF Parsing"
],
"product": "jhead",
"vendor": "Matthias-Wandel",
"versions": [
{
"status": "affected",
"version": "3.0"
},
{
"status": "affected",
"version": "3.1"
},
{
"status": "affected",
"version": "3.2"
},
{
"status": "affected",
"version": "3.3"
}
]
}
],
"credits": [
{
"lang": "en",
"type": "reporter",
"value": "fczhang (VulDB User)"
},
{
"lang": "en",
"type": "coordinator",
"value": "VulDB CNA Team"
}
],
"descriptions": [
{
"lang": "en",
"value": "A weakness has been identified in Matthias-Wandel jhead up to 3.3. This affects the function Get16u of the file exif.c of the component EXIF Parsing. This manipulation causes out-of-bounds read. The attack requires local access. The exploit has been made available to the public and could be used for attacks. The project was informed of the problem early through an issue report but has not responded yet."
}
],
"metrics": [
{
"cvssV4_0": {
"baseScore": 4.8,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:P",
"version": "4.0"
}
},
{
"cvssV3_1": {
"baseScore": 3.3,
"baseSeverity": "LOW",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L/E:P/RL:X/RC:R",
"version": "3.1"
}
},
{
"cvssV3_0": {
"baseScore": 3.3,
"baseSeverity": "LOW",
"vectorString": "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L/E:P/RL:X/RC:R",
"version": "3.0"
}
},
{
"cvssV2_0": {
"baseScore": 1.7,
"vectorString": "AV:L/AC:L/Au:S/C:N/I:N/A:P/E:POC/RL:ND/RC:UR",
"version": "2.0"
}
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-125",
"description": "Out-of-Bounds Read",
"lang": "en",
"type": "CWE"
}
]
},
{
"descriptions": [
{
"cweId": "CWE-119",
"description": "Memory Corruption",
"lang": "en",
"type": "CWE"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2026-09-14T04:15:11.640Z",
"orgId": "1af790b2-7ee1-4545-860a-a788eba489b5",
"shortName": "VulDB"
},
"references": [
{
"name": "VDB-403214 | Matthias-Wandel jhead EXIF Parsing exif.c Get16u out-of-bounds",
"tags": [
"vdb-entry",
"technical-description"
],
"url": "https://vuldb.com/vuln/403214"
},
{
"name": "VDB-403214 | CTI Indicators (IOB, IOC, IOA)",
"tags": [
"signature",
"permissions-required"
],
"url": "https://vuldb.com/vuln/403214/cti"
},
{
"name": "CVE-2026-90681 | CVE Analysis and Report",
"tags": [
"third-party-advisory"
],
"url": "https://vuldb.com/cve/CVE-2026-90681"
},
{
"name": "Submit #914946 | Matthias-Wandel jhead v3.3 (commit 5007491, 3.08-66-g5007491) heap-buffer-overflow (Get16u)",
"tags": [
"third-party-advisory"
],
"url": "https://vuldb.com/submit/914946"
},
{
"tags": [
"issue-tracking"
],
"url": "https://github.com/Matthias-Wandel/jhead/issues/98"
},
{
"tags": [
"exploit"
],
"url": "https://github.com/user-attachments/files/30397052/poc.zip"
},
{
"tags": [
"product"
],
"url": "https://github.com/Matthias-Wandel/jhead/"
}
],
"timeline": [
{
"lang": "en",
"time": "2026-09-13T00:00:00.000Z",
"value": "Advisory disclosed"
},
{
"lang": "en",
"time": "2026-09-13T02:00:00.000Z",
"value": "VulDB entry created"
},
{
"lang": "en",
"time": "2026-09-13T06:53:24.000Z",
"value": "VulDB entry last update"
}
],
"title": "Matthias-Wandel jhead EXIF Parsing exif.c Get16u out-of-bounds",
"x_generator": [
"VulDB PVTS v202609"
]
}
},
"cveMetadata": {
"assignerOrgId": "1af790b2-7ee1-4545-860a-a788eba489b5",
"assignerShortName": "VulDB",
"cveId": "CVE-2026-90681",
"datePublished": "2026-09-14T04:15:11.640Z",
"dateReserved": "2026-09-13T04:47:43.651Z",
"dateUpdated": "2026-09-14T14:58:58.979Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.2"
}
CVE-2024-2824 (GCVE-0-2024-2824)
Vulnerability from cvelistv5 – Published: 2024-03-22 18:00 – Updated: 2024-08-01 20:47
VLAI
EPSS
VEX
Title
Matthias-Wandel jhead exif.c PrintFormatNumber heap-based overflow
Summary
A vulnerability was found in Matthias-Wandel jhead 3.08 and classified as critical. This issue affects the function PrintFormatNumber of the file exif.c. The manipulation leads to heap-based buffer overflow. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-257711.
Severity
6.3 (Medium)
6.3 (Medium)
SSVC
Exploitation: poc
Automatable: no
Technical Impact: partial
CISA Coordinator · CISA-ADP (v2.0.3)
Decision recorded 2024-08-01 20:46 UTC
CWE
- CWE-122 - Heap-based Buffer Overflow
Assigner
References
4 references
| URL | Tags |
|---|---|
| https://vuldb.com/?id.257711 | vdb-entrytechnical-description |
| https://vuldb.com/?ctiid.257711 | signaturepermissions-required |
| https://github.com/Matthias-Wandel/jhead/issues/84 | issue-tracking |
| https://github.com/Matthias-Wandel/jhead/files/14… | exploit |
Impacted products
2 products
| Vendor | Product | Version | |
|---|---|---|---|
| Matthias-Wandel | jhead |
Affected:
3.08
|
|
| jhead_project | jhead |
Affected:
3.08
cpe:2.3:a:jhead_project:jhead:3.08:*:*:*:*:*:*:* |
{
"containers": {
"adp": [
{
"providerMetadata": {
"dateUpdated": "2024-08-01T19:25:42.146Z",
"orgId": "af854a3a-2127-422b-91ae-364da2661108",
"shortName": "CVE"
},
"references": [
{
"name": "VDB-257711 | Matthias-Wandel jhead exif.c PrintFormatNumber heap-based overflow",
"tags": [
"vdb-entry",
"technical-description",
"x_transferred"
],
"url": "https://vuldb.com/?id.257711"
},
{
"name": "VDB-257711 | CTI Indicators (IOB, IOC, IOA)",
"tags": [
"signature",
"permissions-required",
"x_transferred"
],
"url": "https://vuldb.com/?ctiid.257711"
},
{
"tags": [
"issue-tracking",
"x_transferred"
],
"url": "https://github.com/Matthias-Wandel/jhead/issues/84"
},
{
"tags": [
"exploit",
"x_transferred"
],
"url": "https://github.com/Matthias-Wandel/jhead/files/14613084/poc.zip"
}
],
"title": "CVE Program Container"
},
{
"affected": [
{
"cpes": [
"cpe:2.3:a:jhead_project:jhead:3.08:*:*:*:*:*:*:*"
],
"defaultStatus": "unknown",
"product": "jhead",
"vendor": "jhead_project",
"versions": [
{
"status": "affected",
"version": "3.08"
}
]
}
],
"metrics": [
{
"other": {
"content": {
"id": "CVE-2024-2824",
"options": [
{
"Exploitation": "poc"
},
{
"Automatable": "no"
},
{
"Technical Impact": "partial"
}
],
"role": "CISA Coordinator",
"timestamp": "2024-08-01T20:46:02.059659Z",
"version": "2.0.3"
},
"type": "ssvc"
}
}
],
"providerMetadata": {
"dateUpdated": "2024-08-01T20:47:22.904Z",
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"shortName": "CISA-ADP"
},
"title": "CISA ADP Vulnrichment"
}
],
"cna": {
"affected": [
{
"product": "jhead",
"vendor": "Matthias-Wandel",
"versions": [
{
"status": "affected",
"version": "3.08"
}
]
}
],
"credits": [
{
"lang": "en",
"type": "reporter",
"value": "merci (VulDB User)"
}
],
"descriptions": [
{
"lang": "en",
"value": "A vulnerability was found in Matthias-Wandel jhead 3.08 and classified as critical. This issue affects the function PrintFormatNumber of the file exif.c. The manipulation leads to heap-based buffer overflow. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-257711."
},
{
"lang": "de",
"value": "Eine kritische Schwachstelle wurde in Matthias-Wandel jhead 3.08 gefunden. Es geht hierbei um die Funktion PrintFormatNumber der Datei exif.c. Durch die Manipulation mit unbekannten Daten kann eine heap-based buffer overflow-Schwachstelle ausgenutzt werden. Der Angriff kann \u00fcber das Netzwerk angegangen werden. Der Exploit steht zur \u00f6ffentlichen Verf\u00fcgung."
}
],
"metrics": [
{
"cvssV3_1": {
"baseScore": 6.3,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L",
"version": "3.1"
}
},
{
"cvssV3_0": {
"baseScore": 6.3,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L",
"version": "3.0"
}
},
{
"cvssV2_0": {
"baseScore": 7.5,
"vectorString": "AV:N/AC:L/Au:N/C:P/I:P/A:P",
"version": "2.0"
}
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-122",
"description": "CWE-122 Heap-based Buffer Overflow",
"lang": "en",
"type": "CWE"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2024-03-22T18:00:08.695Z",
"orgId": "1af790b2-7ee1-4545-860a-a788eba489b5",
"shortName": "VulDB"
},
"references": [
{
"name": "VDB-257711 | Matthias-Wandel jhead exif.c PrintFormatNumber heap-based overflow",
"tags": [
"vdb-entry",
"technical-description"
],
"url": "https://vuldb.com/?id.257711"
},
{
"name": "VDB-257711 | CTI Indicators (IOB, IOC, IOA)",
"tags": [
"signature",
"permissions-required"
],
"url": "https://vuldb.com/?ctiid.257711"
},
{
"tags": [
"issue-tracking"
],
"url": "https://github.com/Matthias-Wandel/jhead/issues/84"
},
{
"tags": [
"exploit"
],
"url": "https://github.com/Matthias-Wandel/jhead/files/14613084/poc.zip"
}
],
"timeline": [
{
"lang": "en",
"time": "2024-03-22T00:00:00.000Z",
"value": "Advisory disclosed"
},
{
"lang": "en",
"time": "2024-03-22T01:00:00.000Z",
"value": "VulDB entry created"
},
{
"lang": "en",
"time": "2024-03-22T11:45:37.000Z",
"value": "VulDB entry last update"
}
],
"title": "Matthias-Wandel jhead exif.c PrintFormatNumber heap-based overflow"
}
},
"cveMetadata": {
"assignerOrgId": "1af790b2-7ee1-4545-860a-a788eba489b5",
"assignerShortName": "VulDB",
"cveId": "CVE-2024-2824",
"datePublished": "2024-03-22T18:00:08.695Z",
"dateReserved": "2024-03-22T10:39:58.777Z",
"dateUpdated": "2024-08-01T20:47:22.904Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.1"
}