https://db.gcve.eu Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Thu, 05 Nov 2026 10:06:49 +0000 https://db.gcve.eu/vuln/fkie_cve-2026-120452 <p>libgphoto2 through 2.5.34 contains a heap out-of-bounds read and write vulnerability in jl2005bcd_decompress() that allows malicious USB cameras to corrupt heap memory via oversized thumbnail processing. Attackers can supply small allocation-table values and a thumbnail header byte so in-place byte-swapping exceeds the buffer by about 30 KB, leaking heap contents in preview images.</p> <p>libgphoto2 through 2.5.34 contains a heap out-of-bounds read and write vulnerability in jl2005bcd_decompress() that allows malicious USB cameras to corrupt heap memory via oversized thumbnail processing. Attackers can supply small allocation-table values and a thumbnail header byte so in-place byte-swapping exceeds the buffer by about 30 KB, leaking heap contents in preview images.</p> https://db.gcve.eu/vuln/fkie_cve-2026-120452 https://db.gcve.eu/vuln/ghsa-4cvw-qwj9-xjc2 <p>libgphoto2 through 2.5.34 contains a heap out-of-bounds read and write vulnerability in jl2005bcd_decompress() that allows malicious USB cameras to corrupt heap memory via oversized thumbnail processing. Attackers can supply small allocation-table values and a thumbnail header byte so in-place byte-swapping exceeds the buffer by about 30 KB, leaking heap contents in preview images.</p> <p>libgphoto2 through 2.5.34 contains a heap out-of-bounds read and write vulnerability in jl2005bcd_decompress() that allows malicious USB cameras to corrupt heap memory via oversized thumbnail processing. Attackers can supply small allocation-table values and a thumbnail header byte so in-place byte-swapping exceeds the buffer by about 30 KB, leaking heap contents in preview images.</p> https://db.gcve.eu/vuln/ghsa-4cvw-qwj9-xjc2 https://db.gcve.eu/vuln/ubuntu-cve-2026-120452 <p><strong>Affected:</strong> Ubuntu:14.04:LTS: libgphoto2, Ubuntu:16.04:LTS: libgphoto2, Ubuntu:18.04:LTS: libgphoto2, Ubuntu:20.04:LTS: libgphoto2, Ubuntu:22.04:LTS: libgphoto2, Ubuntu:24.04:LTS: libgphoto2, Ubuntu:26.10: libgphoto2, Ubuntu:26.04:LTS: libgphoto2</p> <p>libgphoto2 through 2.5.34 contains a heap out-of-bounds read and write vulnerability in jl2005bcd_decompress() that allows malicious USB cameras to corrupt heap memory via oversized thumbnail processing. Attackers can supply small allocation-table values and a thumbnail header byte so in-place byte-swapping exceeds the buffer by about 30 KB, leaking heap contents in preview images.</p> <p><strong>Affected:</strong> Ubuntu:14.04:LTS: libgphoto2, Ubuntu:16.04:LTS: libgphoto2, Ubuntu:18.04:LTS: libgphoto2, Ubuntu:20.04:LTS: libgphoto2, Ubuntu:22.04:LTS: libgphoto2, Ubuntu:24.04:LTS: libgphoto2, Ubuntu:26.10: libgphoto2, Ubuntu:26.04:LTS: libgphoto2</p> <p>libgphoto2 through 2.5.34 contains a heap out-of-bounds read and write vulnerability in jl2005bcd_decompress() that allows malicious USB cameras to corrupt heap memory via oversized thumbnail processing. Attackers can supply small allocation-table values and a thumbnail header byte so in-place byte-swapping exceeds the buffer by about 30 KB, leaking heap contents in preview images.</p> https://db.gcve.eu/vuln/ubuntu-cve-2026-120452