Gphoto

10 CVEs in 1 Gphoto product, including Libgphoto2. Newest: CVE-2026-120452 (2026-11-02). Severity, EPSS and public exploits for each.

Gphoto products with known CVEs

ProductCVEs
Libgphoto210
Gphoto CVEs — newest first
CVESeverityScorePublishedSummary
CVE-2026-120452Medium5.42026-11-02libgphoto2 through 2.5.34 contains a heap out-of-bounds read and write vulnerability in jl2005bcd_decompress() that allows malicious USB cameras to corrupt hea…
CVE-2026-120451Medium6.82026-11-02libgphoto2 through 2.5.34 contains stack-based and heap-based buffer overflow vulnerabilities in jl2005c_init() that allow malicious USB devices to corrupt mem…
CVE-2026-40341Low3.52026-04-18libgphoto2 is a camera access and control library. In versions up to and including 2.5.33, an out of bound read in ptp_unpack_EOS_FocusInfoEx could be used to…
CVE-2026-40340Medium6.12026-04-18libgphoto2 is a camera access and control library. Versions up to and including 2.5.33 have an out-of-bounds read vulnerability in `ptp_unpack_OI()` in `camlib…
CVE-2026-40339Medium5.22026-04-18libgphoto2 is a camera access and control library. Versions up to and including 2.5.33 have an out-of-bounds read in `ptp_unpack_Sony_DPD()` in `camlibs/ptp2/p…
CVE-2026-40338Medium5.22026-04-18libgphoto2 is a camera access and control library. Versions up to and including 2.5.33 have an out-of-bounds read in the PTP_DPFF_Enumeration case of `ptp_unpa…
CVE-2026-40336Low2.42026-04-18libgphoto2 is a camera access and control library. Versions up to and including 2.5.33 have a memory leak in `ptp_unpack_Sony_DPD()` in `camlibs/ptp2/ptp-pack…
CVE-2026-40335Medium5.22026-04-18libgphoto2 is a camera access and control library. Versions up to and including 2.5.33 have an out-of-bounds read in `ptp_unpack_DPV()` in `camlibs/ptp2/ptp-pa…
CVE-2026-40334Low3.52026-04-18libgphoto2 is a camera access and control library. In versions up to and including 2.5.33, a missing null terminator exists in ptp_unpack_Canon_FE() in camlibs…
CVE-2026-40333Medium6.12026-04-18libgphoto2 is a camera access and control library. In versions up to and including 2.5.33, two functions in camlibs/ptp2/ptp-pack.c accept a data pointer but n…