Log in Start free

Vulnerability · Published Nov 2, 2026 · Assigned by VulnCheck

CVE-2026-120451libgphoto2 through 2.5.34 Buffer Overflow via jl2005c Camera Driver

Medium 6.8

In plain English

A medium-severity out-of-bounds write in libgphoto2 from gPhoto. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.2% (higher than 13% of all known vulnerabilities).

Severity (CVSS 3.1)6.8Medium
Exploit odds (30 days)0.2%top 86.7% of all CVEs
Exploited in the wildNo reportsnot in CISA KEV
Attack toolingNoneno public tooling known

Official description

libgphoto2 through 2.5.34 contains stack-based and heap-based buffer overflow vulnerabilities in jl2005c_init() that allow malicious USB devices to corrupt memory by supplying an unbounded allocation table entry count. Attackers can connect a spoofed Jeilin JL2005B/C/D camera reporting 1022 or more entries to overwrite the saved return address and heap data, potentially achieving code execution.

Affected packages & fixed versions

EcosystemPackageFixed inAdvisory
Debian:12libgphoto2no fix listedDEBIAN-CVE-2026-120451
Debian:13libgphoto2no fix listedDEBIAN-CVE-2026-120451
Debian:14libgphoto2no fix listedDEBIAN-CVE-2026-120451
Ubuntu:22.04:LTSlibgphoto2no fix listedUBUNTU-CVE-2026-120451
Ubuntu:24.04:LTSlibgphoto2no fix listedUBUNTU-CVE-2026-120451
Ubuntu:26.04:LTSlibgphoto2no fix listedUBUNTU-CVE-2026-120451
Ubuntu:26.10libgphoto2no fix listedUBUNTU-CVE-2026-120451

Affected products (as reported)

VendorProductVersions
gPhoto libgphoto2 0 – through 2.5.34

Weakness: CWE-787 · Vector: CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

References