A heap-based buffer overflow was found in jhead in version 3.06 in Get16u() in exif.c when processing a crafted file.
"https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2021-3496.json"