Issues

• Double free in PNG section handling: RemovePngSectionByType() frees without clearing the slot, CreatePngSection() hard-codes NewIndex = 1

  Matthias-Wandel/jhead#114 · Filter by author suywang opened on Oct 1, 2026

• Heap out-of-bounds read in ConvertAnyFormat when an 8-byte format is used with Components == 0

  Matthias-Wandel/jhead#113 · Filter by author suywang opened on Sep 24, 2026

• UBSan: inf to int conversion when deriving FocalLength35mmEquiv in process_EXIF

  Matthias-Wandel/jhead#112 · Filter by author MMu-Aqua opened on Sep 19, 2026

• UBSan: negative double to unsigned conversion for TAG_THUMBNAIL_OFFSET in ProcessExifDir

  Matthias-Wandel/jhead#111 · Filter by author MMu-Aqua opened on Sep 19, 2026

• UBSan: left shift of 255 by 24 places in Get32png when reading PNG chunk length

  Matthias-Wandel/jhead#110 · Filter by author MMu-Aqua opened on Sep 19, 2026

• UBSan: left shift of 255 by 24 places in Get32webp when reading WebP chunk length

  Matthias-Wandel/jhead#109 · Filter by author MMu-Aqua opened on Sep 19, 2026

• UBSan: inf to int conversion in ShowImageInfo when printing ExposureTime

  Matthias-Wandel/jhead#108 · Filter by author MMu-Aqua opened on Sep 17, 2026

• UBSan: misaligned load in ConvertAnyFormat for FMT_SINGLE / FMT_DOUBLE

  Matthias-Wandel/jhead#107 · Filter by author MMu-Aqua opened on Sep 17, 2026

• Heap-buffer-over-read in ProcessGpsInfo() when parsing EXIF GPS from WebP

  Matthias-Wandel/jhead#106 · Filter by author r1ck9-2q opened on Sep 8, 2026

• Three bugs in jhead latest

  Matthias-Wandel/jhead#105 · Filter by author ylwango613 opened on Sep 7, 2026

• Windows MyGlob: stack buffer overflow in strcpy(PatCopy, Pattern)

  Matthias-Wandel/jhead#104 · Filter by author takushita opened on Aug 21, 2026

• UBSan: undefined behavior in PNG chunk length check in jhead/pngfile.c

  Matthias-Wandel/jhead#103 · Filter by author MMu-Aqua opened on Aug 15, 2026

• UBSan: left shift of negative value in Get32s() at jhead/exif.c when parsing malformed EXIF data

  Matthias-Wandel/jhead#102 · Filter by author MMu-Aqua opened on Aug 4, 2026

• Consider tagging v3.3, adding license file

  Matthias-Wandel/jhead#101 · Filter by author davidjharder opened on Jul 31, 2026

• Heap-buffer-overflow in function Get16u() at jhead-asan-ubsan-build/exif.c

  Matthias-Wandel/jhead#100 · Filter by author MMu-Aqua opened on Jul 30, 2026

• WebP EXIF out-of-bounds read in Get32s when processing GPS information

  Matthias-Wandel/jhead#99 · Filter by author lingmaple opened on Jul 27, 2026

• WebP EXIF out-of-bounds read in Get16u when processing EXIF directory

  Matthias-Wandel/jhead#98 · Filter by author lingmaple opened on Jul 27, 2026

• jhead: heap-buffer-overflow WRITE in Put32u at exif.c:360 (jhead main branch @5007491)

  Matthias-Wandel/jhead#97 · Filter by author HackC0der opened on Jun 11, 2026

• jhead: heap-buffer-overflow READ in SaveImgThumbnail at imgfile.c:365 (jhead main branch @5007491)

  Matthias-Wandel/jhead#96 · Filter by author HackC0der opened on Jun 11, 2026

• heap-use-after-free at jhead/exif.c:1259 in clearOrientation()

  Matthias-Wandel/jhead#79 · Filter by author Shin-Yan opened on Sep 7, 2023
  3