https://db.gcve.eu/rss/recent/all/10 Most recent entries from all 2026-11-05T03:20:06.154176+00:00 Vulnerability-Lookup info@gcve.eu python-feedgen Contains only the most 10 recent entries. https://db.gcve.eu/vuln/fkie_cve-2026-120452 fkie_cve-2026-120452 2026-11-05T03:20:06.158293+00:00

libgphoto2 through 2.5.34 contains a heap out-of-bounds read and write vulnerability in jl2005bcd_decompress() that allows malicious USB cameras to corrupt heap memory via oversized thumbnail processing. Attackers can supply small allocation-table values and a thumbnail header byte so in-place byte-swapping exceeds the buffer by about 30 KB, leaking heap contents in preview images.

 https://db.gcve.eu/vuln/ghsa-4cvw-qwj9-xjc2 GHSA-4cvw-qwj9-xjc2 2026-11-05T03:20:06.158366+00:00

libgphoto2 through 2.5.34 contains a heap out-of-bounds read and write vulnerability in jl2005bcd_decompress() that allows malicious USB cameras to corrupt heap memory via oversized thumbnail processing. Attackers can supply small allocation-table values and a thumbnail header byte so in-place byte-swapping exceeds the buffer by about 30 KB, leaking heap contents in preview images.

 https://db.gcve.eu/vuln/ubuntu-cve-2026-120452 UBUNTU-CVE-2026-120452 2026-11-05T03:20:06.158395+00:00

Affected: Ubuntu:14.04:LTS: libgphoto2, Ubuntu:16.04:LTS: libgphoto2, Ubuntu:18.04:LTS: libgphoto2, Ubuntu:20.04:LTS: libgphoto2, Ubuntu:22.04:LTS: libgphoto2, Ubuntu:24.04:LTS: libgphoto2, Ubuntu:26.10: libgphoto2, Ubuntu:26.04:LTS: libgphoto2

libgphoto2 through 2.5.34 contains a heap out-of-bounds read and write vulnerability in jl2005bcd_decompress() that allows malicious USB cameras to corrupt heap memory via oversized thumbnail processing. Attackers can supply small allocation-table values and a thumbnail header byte so in-place byte-swapping exceeds the buffer by about 30 KB, leaking heap contents in preview images.