gPhoto vulnerabilities
10 published CVEs name gPhoto among the affected products.
- 10Published CVEs10 of them scored
- 10Last 12 monthspublished in the last year
- 0Critical1 more rated high
- 0Known exploitedin CISA's KEV catalog
Newest CVEs
- CVE-2026-120452
libgphoto2 through 2.5.34 Heap Out-of-Bounds Read/Write via jl2005c Thumbnail Conversion
gPhoto · libgphoto2
Medium5.2 - CVE-2026-120451
libgphoto2 through 2.5.34 Buffer Overflow via jl2005c Camera Driver
gPhoto · libgphoto2
High7.0 - CVE-2026-40341
libgphoto2 has an OOB Read in ptp_unpack_EOS_FocusInfoEx
gphoto · libgphoto2
Low3.5 - CVE-2026-40340
libgphoto2 has OOB read in ptp_unpack_OI() in ptp-pack.c via malicious PTP ObjectInfo response
gphoto · libgphoto2
Medium6.1 - CVE-2026-40339
libgphoto2 has OOB read in ptp_unpack_Sony_DPD() FormFlag parsing in ptp-pack.c
gphoto · libgphoto2
Medium5.2 - CVE-2026-40338
libgphoto2 has OOB read in ptp_unpack_Sony_DPD() enumeration count parsing in ptp-pack.c
gphoto · libgphoto2
Medium5.2 - CVE-2026-40336
libgphoto2 has memory leak in ptp_unpack_Sony_DPD() secondary enumeration list in ptp-pack.c
gphoto · libgphoto2
Low2.4 - CVE-2026-40335
libgphoto2 has OOB read in ptp_unpack_DPV() UINT128/INT128 handling in ptp-pack.c
gphoto · libgphoto2
Medium5.2 - CVE-2026-40334
libgphoto2 missing null termination in ptp_unpack_Canon_FE() filename buffer in ptp-pack.c
gphoto · libgphoto2
Low3.5 - CVE-2026-40333
libgphoto2 has OOB read in ptp_unpack_EOS_ImageFormat() and ptp_unpack_EOS_CustomFuncEx() due to missing length parameter in ptp-pack.c
gphoto · libgphoto2
Medium6.1