Jhead
1 CVEs
product
Monthly
jhead v3.08 was discovered to contain a heap-use-after-free via the ProcessFile function at jhead.c. Rated high severity (CVSS 7.8), this vulnerability is no authentication required, low attack complexity. Public exploit code available and no vendor patch available.
Use After Free
Memory Corruption
Information Disclosure
Jhead
Suse
NVD
GitHub
CVSS 3.1
7.8
EPSS
0.1%
CVE-2025-44906
EPSS 0%
CVSS 7.8
HIGH
POC
This Month
jhead v3.08 was discovered to contain a heap-use-after-free via the ProcessFile function at jhead.c. Rated high severity (CVSS 7.8), this vulnerability is no authentication required, low attack complexity. Public exploit code available and no vendor patch available.
Use After Free
Memory Corruption
Information Disclosure
+2
NVD
GitHub