CVE-2016-3822

exif.c in Matthias Wandel jhead 2.87, as used in libjhead in Android 4.x before 4.4.4, 5.0.x before 5.0.2, 5.1.x before 5.1.1, and 6.x before 2016-08-01…

published August 5, 2016

CVSS
—
EPSS
1%
Percentile
69.4
In the wild
Unconfirmed
What it is

exif.c in Matthias Wandel jhead 2.87, as used in libjhead in Android 4.x before 4.4.4, 5.0.x before 5.0.2, 5.1.x before 5.1.1, and 6.x before 2016-08-01, allows remote attackers to execute arbitrary code or cause a denial of service (out-of-bounds access) via crafted EXIF data, aka internal bug 28868315.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01267 · 69.4th percentile
Published
2016-08-05T20:00Z
EPSS history
Timeline
  • 05 AUG 20:00Z
    exif.c in Matthias Wandel jhead 2.87, as used in libjhead in Android 4.x before 4.4.4, 5.0.x before 5.0.2, 5.1.x before 5.1.1, and 6.x before 2016-08-01…
    cvelistv5