libgphoto2 vulnerabilities
CVEs whose affected-version data names the libgphoto2 package. Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.
2 CVEsRSS
CVE-2026-120452Medium· 5.4libgphoto2 through 2.5.34 Heap Out-of-Bounds Read/Write via jl2005c Thumbnail Conversion
libgphoto2 through 2.5.34 contains a heap out-of-bounds read and write vulnerability in jl2005bcd_decompress() that allows malicious USB cameras to corrupt heap memory via oversized thumbnail processing. Attackers can supply small alloca…
▾ SunlitgPhoto · libgphoto2EPSS 0.18%via CVEORG
CVE-2026-120451Medium· 6.8PoClibgphoto2 through 2.5.34 Buffer Overflow via jl2005c Camera Driver
libgphoto2 through 2.5.34 contains stack-based and heap-based buffer overflow vulnerabilities in jl2005c_init() that allow malicious USB devices to corrupt memory by supplying an unbounded allocation table entry count. Attackers can conn…
▾ TwilightgPhoto · libgphoto2EPSS 0.22%via CVEORG