CVE-2026-90682 | Matthias-Wandel jhead up to 3.3 WebP EXIF gpsinfo.c ProcessGpsInfo TAG_GPS_LAT/TAG_GPS_LONG heap-based overflow (Issue 99 / EUVD-2026-77198)

A vulnerability classified as problematic was found in Matthias-Wandel jhead up to 3.3. This impacts the function ProcessGpsInfo of the file gpsinfo.c of the component WebP EXIF Handler. Such manipulation of the argument TAG_GPS_LAT/TAG_GPS_LONG leads to heap-based buffer overflow. This vulnerability is traded as CVE-2026-90682. An attack has to... Weiterlesen