gPhoto

Products

ProductCVEsExploitedLatest
libgphoto210–Nov 2, 2026

Exploited and recent CVEs

  • CVE-2026-120452 Medium 5.4 libgphoto2 through 2.5.34 Heap Out-of-Bounds Read/Write via jl2005c Thumbnail Conversion 0.2%
  • CVE-2026-120451 Medium 6.8 libgphoto2 through 2.5.34 Buffer Overflow via jl2005c Camera Driver 0.2%
  • CVE-2026-40341 Low 3.5 libgphoto2 has an OOB Read in ptp_unpack_EOS_FocusInfoEx 0.2%
  • CVE-2026-40340 Medium 6.1 libgphoto2 has OOB read in ptp_unpack_OI() in ptp-pack.c via malicious PTP ObjectInfo response 0.2%
  • CVE-2026-40339 Medium 5.2 libgphoto2 has OOB read in ptp_unpack_Sony_DPD() FormFlag parsing in ptp-pack.c 0.2%
  • CVE-2026-40338 Medium 5.2 libgphoto2 has OOB read in ptp_unpack_Sony_DPD() enumeration count parsing in ptp-pack.c 0.2%
  • CVE-2026-40336 Low 2.4 libgphoto2 has memory leak in ptp_unpack_Sony_DPD() secondary enumeration list in ptp-pack.c 0.2%
  • CVE-2026-40335 Medium 5.2 libgphoto2 has OOB read in ptp_unpack_DPV() UINT128/INT128 handling in ptp-pack.c 0.2%
  • CVE-2026-40334 Low 3.5 libgphoto2 missing null termination in ptp_unpack_Canon_FE() filename buffer in ptp-pack.c 0.2%
  • CVE-2026-40333 Medium 6.1 libgphoto2 has OOB read in ptp_unpack_EOS_ImageFormat() and ptp_unpack_EOS_CustomFuncEx() due to missing length parameter in ptp-pack.c 0.2%