CVE-2021-3496: 
NixOS vulnerability analysis and mitigation

A heap-based buffer overflow vulnerability was discovered in jhead version 3.06 in the Get16u() function within exif.c when processing a crafted file. The vulnerability was assigned CVE-2021-3496 and was reported on April 13, 2021 (RedHat Bugzilla, NVD).

The vulnerability is a heap-based buffer overflow that occurs in the Get16u() function within exif.c when processing specially crafted files. The issue was discovered using AddressSanitizer, which detected a heap-buffer-overflow READ of size 1 at a specific memory address. The vulnerability has been assigned a CVSS v3.1 base score of 7.8 (High) with the vector string CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H (NVD).

The vulnerability could allow an attacker to cause a heap-based buffer overflow by processing a specially crafted file, potentially leading to denial of service or arbitrary code execution. The vulnerability affects the confidentiality, integrity, and availability of the system with high impact ratings (NVD).

The vulnerability requires local access and user interaction to exploit, as indicated by the CVSS vector. A proof-of-concept exploit has been documented that demonstrates the buffer overflow using a crafted JPEG file (GitHub Issue).

The vulnerability has been fixed in jhead version 3.06.0.1. Users are advised to upgrade to this version or later. Various distributions have released patches for their respective packages, including Gentoo which addressed this in GLSA 202210-17 (Gentoo Advisory).