{"id":"CVE-2024-2824","aliases":["DEBIAN-CVE-2024-2824","EUVD-2024-27768","GHSA-fqcm-gr77-6gqg","UBUNTU-CVE-2024-2824"],"status":"published","title":"Matthias-Wandel jhead exif.c PrintFormatNumber heap-based overflow","description":"A vulnerability was found in Matthias-Wandel jhead 3.08 and classified as critical. This issue affects the function PrintFormatNumber of the file exif.c. The manipulation leads to heap-based buffer overflow. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-257711.","severity":{"version":"3.1","score":6.3,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L","level":"medium","assessor":"cna","from":"cve"},"epss":{"day":"2026-11-09","score":0.00734,"percentile":0.54676,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":false},"cwes":["CWE-122"],"published":"2024-03-22T18:00:08Z","modified":"2026-11-02T12:02:30Z","affected":[{"source":"osv","ecosystem":"Debian:12","package":"jhead","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["1:3.06.0.1-6","1:3.08-1","1:3.08-2","1:3.08-3"]},{"source":"osv","ecosystem":"Debian:13","package":"jhead","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["1:3.08-3"]},{"source":"osv","ecosystem":"Debian:14","package":"jhead","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["1:3.08-3"]},{"source":"osv","ecosystem":"Ubuntu:Pro:14.04:LTS","package":"jhead","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["1:2.97-1","1:2.97-1+deb8u1build0.14.04.1","1:2.97-1+deb8u2build0.14.04.1~esm1","1:2.97-1+deb8u2ubuntu0.1~esm1","1:2.97-1+deb8u2ubuntu0.1~esm2","1:2.97-1+deb8u2ubuntu0.1~esm3","1:2.97-1+deb8u2ubuntu0.1~esm4"]},{"source":"osv","ecosystem":"Ubuntu:Pro:16.04:LTS","package":"jhead","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["1:3.00-1","1:3.00-2","1:3.00-3","1:3.00-4+deb9u1build0.16.04.1","1:3.00-4+deb9u1ubuntu0.1~esm1","1:3.00-4+deb9u1ubuntu0.1~esm2","1:3.00-4+deb9u1ubuntu0.1~esm3","1:3.00-4+deb9u1ubuntu0.1~esm4"]},{"source":"osv","ecosystem":"Ubuntu:Pro:18.04:LTS","package":"jhead","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["1:3.00-4","1:3.00-5","1:3.00-6","1:3.00-8~build0.18.04.1","1:3.00-8~ubuntu0.1","1:3.00-8~ubuntu0.2","1:3.00-8~ubuntu0.2+esm1"]},{"source":"osv","ecosystem":"Ubuntu:Pro:20.04:LTS","package":"jhead","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["1:3.03-3","1:3.04-1","1:3.04-1ubuntu0.1","1:3.04-1ubuntu0.2","1:3.04-1ubuntu0.2+esm1"]},{"source":"osv","ecosystem":"Ubuntu:Pro:22.04:LTS","package":"jhead","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["1:3.04-6","1:3.06.0.1-2","1:3.06.0.1-2ubuntu0.22.04.1","1:3.06.0.1-2ubuntu0.22.04.1+esm1"]},{"source":"osv","ecosystem":"Ubuntu:24.04:LTS","package":"jhead","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["1:3.08-1","1:3.08-2"]},{"source":"osv","ecosystem":"Ubuntu:25.10","package":"jhead","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["1:3.08-3"]},{"source":"osv","ecosystem":"Ubuntu:26.10","package":"jhead","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["1:3.08-3build1"]},{"source":"osv","ecosystem":"Ubuntu:26.04:LTS","package":"jhead","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["1:3.08-3","1:3.08-3build1"]}],"products":[{"vendor":"jhead_project","product":"jhead"},{"vendor":"matthias-wandel","product":"jhead"}],"references":[{"url":"https://vuldb.com/?id.257711","tags":["vdb-entry","technical-description","x_transferred","advisory","report"]},{"url":"https://vuldb.com/?ctiid.257711","tags":["signature","permissions-required","x_transferred","report"]},{"url":"https://github.com/Matthias-Wandel/jhead/issues/84","tags":["issue-tracking","x_transferred","report"]},{"url":"https://github.com/Matthias-Wandel/jhead/files/14613084/poc.zip","tags":["exploit","x_transferred","evidence","report"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2024-2824","tags":["advisory"]},{"url":"https://github.com/advisories/GHSA-fqcm-gr77-6gqg"},{"url":"https://github.com/CVEProject/cvelistV5/tree/main/cves/2024/2xxx/CVE-2024-2824.json","tags":["advisory"]},{"url":"https://security-tracker.debian.org/tracker/CVE-2024-2824","tags":["advisory"]},{"url":"https://ubuntu.com/security/CVE-2024-2824","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2024-2824","tags":["report"]}],"sources":{"cve":[{"id":"CVE-2024-2824","title":"Matthias-Wandel jhead exif.c PrintFormatNumber heap-based overflow","description":"A vulnerability was found in Matthias-Wandel jhead 3.08 and classified as critical. This issue affects the function PrintFormatNumber of the file exif.c. The manipulation leads to heap-based buffer overflow. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-257711.","status":"published","published":"2024-03-22T18:00:08.695Z","modified":"2024-08-01T20:47:22.904Z","cvss":[{"version":"3.1","score":6.3,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L","level":"medium","assessor":"cna"},{"version":"3.0","score":6.3,"vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L","level":"medium","assessor":"cna"},{"version":"2.0","score":7.5,"vector":"AV:N/AC:L/Au:N/C:P/I:P/A:P","assessor":"cna"}],"cwes":["CWE-122"],"updated_at":"2026-11-02T14:34:09.897248Z"}],"euvd":[{"id":"EUVD-2024-27768","description":"A vulnerability was found in Matthias-Wandel jhead 3.08 and classified as critical. This issue affects the function PrintFormatNumber of the file exif.c. The manipulation leads to heap-based buffer overflow. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-257711.","status":"published","published":"2024-03-22T18:00:08Z","modified":"2024-08-01T20:47:22Z","cvss":[{"version":"3.1","score":6.3,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L","level":"medium"}],"updated_at":"2026-11-03T03:50:36.775345Z"}],"ghsa":[{"id":"GHSA-fqcm-gr77-6gqg","title":"A vulnerability was found in Matthias-Wandel jhead 3.08 and classified as critical. This issue...","description":"A vulnerability was found in Matthias-Wandel jhead 3.08 and classified as critical. This issue affects the function PrintFormatNumber of the file exif.c. The manipulation leads to heap-based buffer overflow. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-257711.","status":"published","published":"2024-03-22T18:30:32Z","modified":"2024-03-22T18:30:38Z","cvss":[{"version":"3.1","score":6.3,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L","level":"medium"}],"cwes":["CWE-122"],"updated_at":"2026-11-02T14:55:42.57954Z"}],"nvd":[{"id":"CVE-2024-2824","description":"A vulnerability was found in Matthias-Wandel jhead 3.08 and classified as critical. This issue affects the function PrintFormatNumber of the file exif.c. The manipulation leads to heap-based buffer overflow. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-257711.","status":"published","published":"2024-03-22T18:15:08.063Z","modified":"2026-06-17T07:25:37.61Z","cvss":[{"version":"3.1","score":6.3,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L","level":"medium","assessor":"secondary"},{"version":"2.0","score":7.5,"vector":"AV:N/AC:L/Au:N/C:P/I:P/A:P","level":"high","assessor":"secondary"}],"cwes":["CWE-122"],"updated_at":"2026-11-02T14:09:43.052376Z"}],"osv":[{"id":"CVE-2024-2824","title":"Matthias-Wandel jhead exif.c PrintFormatNumber heap-based overflow","description":"A vulnerability was found in Matthias-Wandel jhead 3.08 and classified as critical. This issue affects the function PrintFormatNumber of the file exif.c. The manipulation leads to heap-based buffer overflow. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-257711.","status":"published","published":"2024-03-22T18:00:08.695Z","modified":"2026-10-28T02:30:46.22328543Z","cvss":[{"version":"3.1","score":6.3,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L","level":"medium"}],"cwes":["CWE-122"],"updated_at":"2026-11-02T15:44:39.569658Z"},{"id":"DEBIAN-CVE-2024-2824","description":"A vulnerability was found in Matthias-Wandel jhead 3.08 and classified as critical. This issue affects the function PrintFormatNumber of the file exif.c. The manipulation leads to heap-based buffer overflow. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-257711.","status":"published","published":"2024-03-22T18:15:08.063Z","modified":"2026-11-02T12:02:30.518310584Z","cvss":[{"version":"3.1","score":6.3,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L","level":"medium"}],"updated_at":"2026-11-02T15:45:42.530184Z"},{"id":"UBUNTU-CVE-2024-2824","description":"A vulnerability was found in Matthias-Wandel jhead 3.08 and classified as critical. This issue affects the function PrintFormatNumber of the file exif.c. The manipulation leads to heap-based buffer overflow. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-257711.","status":"published","published":"2024-03-22T18:15:00Z","modified":"2026-10-17T12:56:44.36848987Z","cvss":[{"version":"3.1","score":6.3,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L","level":"medium"}],"updated_at":"2026-11-02T16:54:48.333535Z"}]}}