Gphoto vulnerabilities

Products

• Libgphoto2 10

Newest

• gphoto libgphoto2 libgphoto2 through 2.5.34 Heap Out-of-Bounds Read/Write via jl2005c Thumbnail Conversion CVE-2026-120452 5.2 MediumNovember 2, 2026
• gphoto libgphoto2 libgphoto2 through 2.5.34 Buffer Overflow via jl2005c Camera Driver CVE-2026-120451 7.0 HighNovember 2, 2026
• gphoto libgphoto2 libgphoto2 has an OOB Read in ptp_unpack_EOS_FocusInfoEx CVE-2026-40341 Fix available 3.5 LowApril 17, 2026
• gphoto libgphoto2 libgphoto2 has OOB read in ptp_unpack_OI() in ptp-pack.c via malicious PTP ObjectInfo response CVE-2026-40340 Fix available 6.1 MediumApril 17, 2026
• gphoto libgphoto2 libgphoto2 has OOB read in ptp_unpack_Sony_DPD() FormFlag parsing in ptp-pack.c CVE-2026-40339 Fix available 5.2 MediumApril 17, 2026
• gphoto libgphoto2 libgphoto2 has OOB read in ptp_unpack_Sony_DPD() enumeration count parsing in ptp-pack.c CVE-2026-40338 Fix available 5.2 MediumApril 17, 2026
• gphoto libgphoto2 libgphoto2 has memory leak in ptp_unpack_Sony_DPD() secondary enumeration list in ptp-pack.c CVE-2026-40336 Fix available 2.4 LowApril 17, 2026
• gphoto libgphoto2 libgphoto2 has OOB read in ptp_unpack_DPV() UINT128/INT128 handling in ptp-pack.c CVE-2026-40335 Fix available 5.2 MediumApril 17, 2026
• gphoto libgphoto2 libgphoto2 missing null termination in ptp_unpack_Canon_FE() filename buffer in ptp-pack.c CVE-2026-40334 Fix available 3.5 LowApril 17, 2026
• gphoto libgphoto2 libgphoto2 has OOB read in ptp_unpack_EOS_ImageFormat() and ptp_unpack_EOS_CustomFuncEx() due to missing length parameter in ptp-pack.c CVE-2026-40333 Fix available 6.1 MediumApril 17, 2026