PT-2026-33538 · Unknown+1 · Libgphoto2+1
CVE-2026-40340
·
Published
2026-04-17
·
Updated
2026-07-22
CVSS v3.1
6.1
Medium
| Vector | AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H |
Name of the Vulnerable Software and Affected Versions
libgphoto2 versions prior to 2.5.34
Description
An out-of-bounds read exists in the
ptp unpack OI() function within camlibs/ptp2/ptp-pack.c. The function validates that the len variable is less than PTP oi SequenceNumber (48), but it subsequently accesses offsets 48 through 56, reading up to 9 bytes beyond the validated boundary via the Samsung Galaxy 64-bit objectsize detection heuristic.Recommendations
Update to a version later than 2.5.33.
Exploit
Fix
Out of bounds Read
Found an issue in the description? Have something to add? Feel free to write us 👾
Weakness Enumeration
Related Identifiers
Affected Products
Ubuntu
Libgphoto2