CVE 2020-6625

jhead through 3.04 has a heap-based buffer over-read in Get32s when called from ProcessGpsInfo in gpsinfo.c.

Related bugs and status

CVE-2020-6625 (Candidate) is related to these bugs:

Bug #1858746: heap-buffer-overflow on jhead-3.04/exif.c:336 Get32s

Summary				In	Importance	Status
	1858746	heap-buffer-overflow on jhead-3.04/exif.c:336 Get32s		jhead (Ubuntu)	Undecided	New

See the

CVE page on Mitre.org for more details.