Log in Start free

Vulnerability · Published Nov 2, 2026 · Assigned by VulnCheck

CVE-2026-120452libgphoto2 through 2.5.34 Heap Out-of-Bounds Read/Write via jl2005c Thumbnail Conversion

Medium 5.4

In plain English

A medium-severity out-of-bounds write in libgphoto2 from gPhoto. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.2% (higher than 8% of all known vulnerabilities).

Severity (CVSS 3.1)5.4Medium
Exploit odds (30 days)0.2%top 91.9% of all CVEs
Exploited in the wildNo reportsCISA SSVC: none
Attack toolingNoneno public tooling known

Official description

libgphoto2 through 2.5.34 contains a heap out-of-bounds read and write vulnerability in jl2005bcd_decompress() that allows malicious USB cameras to corrupt heap memory via oversized thumbnail processing. Attackers can supply small allocation-table values and a thumbnail header byte so in-place byte-swapping exceeds the buffer by about 30 KB, leaking heap contents in preview images.

Affected packages & fixed versions

EcosystemPackageFixed inAdvisory
Debian:12libgphoto2no fix listedDEBIAN-CVE-2026-120452
Debian:13libgphoto2no fix listedDEBIAN-CVE-2026-120452
Debian:14libgphoto2no fix listedDEBIAN-CVE-2026-120452
Ubuntu:22.04:LTSlibgphoto2no fix listedUBUNTU-CVE-2026-120452
Ubuntu:24.04:LTSlibgphoto2no fix listedUBUNTU-CVE-2026-120452
Ubuntu:26.04:LTSlibgphoto2no fix listedUBUNTU-CVE-2026-120452
Ubuntu:26.10libgphoto2no fix listedUBUNTU-CVE-2026-120452

Affected products (as reported)

VendorProductVersions
gPhoto libgphoto2 0 – through 2.5.34

Weakness: CWE-787 · Vector: CVSS:3.1/AV:P/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:H

References