← All advisories

High severity7.1NVD Advisory· Published Jan 9, 2020· Updated Jun 17, 2026

CVE-2020-6625

CVE-2020-6625

Description

jhead through 3.04 has a heap-based buffer over-read in Get32s when called from ProcessGpsInfo in gpsinfo.c.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

5

Jhead Project/Jhead
cpe:2.3:a:jhead_project:jhead:*:*:*:*:*:*:*:*
Range: <=3.04
jhead/jheaddescription
Jhead/jheadllm-fuzzy
Range: <=3.04
osv-coords2 versions
pkg:rpm/opensuse/jhead&distro=openSUSE%20Leap%2015.2 pkg:rpm/suse/jhead&distro=SUSE%20Package%20Hub%2015%20SP2
< 3.06.0.1-lp152.7.6.1+ 1 more
- (no CPE)range: < 3.06.0.1-lp152.7.6.1
- (no CPE)range: < 3.06.0.1-bp152.4.6.1

Patches

Vulnerability mechanics

References

4

bugs.launchpad.net/ubuntu/+source/jhead/+bug/1858746nvdExploitIssue TrackingThird Party Advisory
bugs.gentoo.org/711220nvdIssue TrackingThird Party Advisory
bugs.gentoo.org/876247nvdIssue TrackingThird Party Advisory
security.gentoo.org/glsa/202007-17nvdThird Party Advisory

News mentions

0

No linked articles in our index yet.