CVE-2025-44906

jhead v3.08 was discovered to contain a heap-use-after-free via the ProcessFile function at jhead.c.

CVSS v3.1

7.8 HIGHCVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

EPSS

0.26% chance of exploitation in the next 30 days, 17th percentile

Published

2025-05-30

Proof-of-concept exploits (1)

• madao123123/crash_report/blob/main/jhead/jhead.md

References

• CVE Record
• NVD entry

Related

• CVE-2025-2308
• CVE-2025-2309
• CVE-2025-2310
• CVE-2025-44904
• CVE-2025-44905
• CVE-2025-4491