Search: CVE-2026-90681

CVE-2026-90681 is an out-of-bounds read vulnerability in the Get16u function of the exif.c file in Matthias-Wandel jhead versions 3.0 through 3.3. This flaw requires local access to exploit and involves manipulation of EXIF parsing. The vulnerability has a medium severity rating with a CVSS score of 4.8. Although an exploit is publicly available, there is no vendor response or patch at this time.