Skip to contentGphoto Libgphoto2 vulnerabilities
- gphoto libgphoto2libgphoto2 through 2.5.34 Heap Out-of-Bounds Read/Write via jl2005c Thumbnail ConversionCVE-2026-120452Fix available5.2 Medium
- gphoto libgphoto2libgphoto2 through 2.5.34 Buffer Overflow via jl2005c Camera DriverCVE-2026-120451Fix available7.0 High
- gphoto libgphoto2libgphoto2 has an OOB Read in ptp_unpack_EOS_FocusInfoExCVE-2026-40341Fix available3.5 Low
- gphoto libgphoto2libgphoto2 has OOB read in ptp_unpack_OI() in ptp-pack.c via malicious PTP ObjectInfo responseCVE-2026-40340Fix available6.1 Medium
- gphoto libgphoto2libgphoto2 has OOB read in ptp_unpack_Sony_DPD() FormFlag parsing in ptp-pack.cCVE-2026-40339Fix available5.2 Medium
- gphoto libgphoto2libgphoto2 has OOB read in ptp_unpack_Sony_DPD() enumeration count parsing in ptp-pack.cCVE-2026-40338Fix available5.2 Medium
- gphoto libgphoto2libgphoto2 has memory leak in ptp_unpack_Sony_DPD() secondary enumeration list in ptp-pack.cCVE-2026-40336Fix available2.4 Low
- gphoto libgphoto2libgphoto2 has OOB read in ptp_unpack_DPV() UINT128/INT128 handling in ptp-pack.cCVE-2026-40335Fix available5.2 Medium
- gphoto libgphoto2libgphoto2 missing null termination in ptp_unpack_Canon_FE() filename buffer in ptp-pack.cCVE-2026-40334Fix available3.5 Low
- gphoto libgphoto2libgphoto2 has OOB read in ptp_unpack_EOS_ImageFormat() and ptp_unpack_EOS_CustomFuncEx() due to missing length parameter in ptp-pack.cCVE-2026-40333Fix available6.1 Medium