CVE-2026-40334

Name of the Vulnerable Software and Affected Versions libgphoto2 versions prior to 2.5.34

Description A missing null terminator exists in the ptp unpack Canon FE() function within the camlibs/ptp2/ptp-pack.c file. The function uses strncpy to copy a filename into a 13-byte buffer without ensuring the result is null-terminated. If the source data is exactly 13 bytes and lacks a null terminator, the buffer remains unterminated, which can lead to out-of-bounds reads during subsequent string operations.

Recommendations Update to a version later than 2.5.33.