https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sat, 03 Oct 2026 04:09:21 +0000 https://cve.radiocsirt.org/vuln/euvd-2026-292013 EUVD-2026-292013 https://cve.radiocsirt.org/vuln/euvd-2026-292013 https://cve.radiocsirt.org/vuln/fkie_cve-2026-40333 <p>libgphoto2 is a camera access and control library. In versions up to and including 2.5.33, two functions in camlibs/ptp2/ptp-pack.c accept a data pointer but no length parameter, performing unbounded reads. Their callers in ptp_unpack_EOS_events() have xsize available but never pass it, leaving both functions unable to validate reads against the actual buffer boundary. Commit 1817ecead20c2aafa7549dac9619fe38f47b2f53 patches the issue.</p> <p>libgphoto2 is a camera access and control library. In versions up to and including 2.5.33, two functions in camlibs/ptp2/ptp-pack.c accept a data pointer but no length parameter, performing unbounded reads. Their callers in ptp_unpack_EOS_events() have xsize available but never pass it, leaving both functions unable to validate reads against the actual buffer boundary. Commit 1817ecead20c2aafa7549dac9619fe38f47b2f53 patches the issue.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2026-40333 https://cve.radiocsirt.org/vuln/oesa-2026-2785 <p><strong>Affected:</strong> openEuler:24.03-LTS-SP1: libgphoto2, openEuler:24.03-LTS-SP3: libgphoto2, openEuler:20.03-LTS-SP4: libgphoto2, openEuler:22.03-LTS-SP4: libgphoto2</p> <p>is the core of gphoto2 software. It is a portable library which gives access to literally hundreds of digital cameras. Security Fix(es):</p> <p>libgphoto2 is a camera access and control library. In versions up to and including 2.5.33, two functions in camlibs/ptp2/ptp-pack.c accept a data pointer but no length parameter, performing unbounded reads. Their callers in ptp_unpack_EOS_events() have xsize available but never pass it, leaving both functions unable to validate reads against the actual buffer boundary. Commit 1817ecead20c2aafa7549dac9619fe38f47b2f53 patches the issue.(CVE-2026-40333)</p> <p>libgphoto2 is a camera access and control library. Versions up to and including 2.5.33 have a memory leak in `ptp_unpack_Sony_DPD()` in `camlibs/ptp2/ptp-pack.c` (lines 884–885). When processing a secondary enumeration list (introduced in 2024+ Sony cameras), the function overwrites dpd-&amp;gt;FORM.Enum.SupportedValue with a new calloc() without freeing the previous allocation from line 857. The original array and any string values it contains are leaked on every property descriptor parse. Commit 404ff02c75f3cb280196fc260a63c4d26cf1a8f6 fixes the issue.(CVE-2026-40336)</p> <p><strong>Affected:</strong> openEuler:24.03-LTS-SP1: libgphoto2, openEuler:24.03-LTS-SP3: libgphoto2, openEuler:20.03-LTS-SP4: libgphoto2, openEuler:22.03-LTS-SP4: libgphoto2</p> <p>is the core of gphoto2 software. It is a portable library which gives access to literally hundreds of digital cameras. Security Fix(es):</p> <p>libgphoto2 is a camera access and control library. In versions up to and including 2.5.33, two functions in camlibs/ptp2/ptp-pack.c accept a data pointer but no length parameter, performing unbounded reads. Their callers in ptp_unpack_EOS_events() have xsize available but never pass it, leaving both functions unable to validate reads against the actual buffer boundary. Commit 1817ecead20c2aafa7549dac9619fe38f47b2f53 patches the issue.(CVE-2026-40333)</p> <p>libgphoto2 is a camera access and control library. Versions up to and including 2.5.33 have a memory leak in `ptp_unpack_Sony_DPD()` in `camlibs/ptp2/ptp-pack.c` (lines 884–885). When processing a secondary enumeration list (introduced in 2024+ Sony cameras), the function overwrites dpd-&amp;gt;FORM.Enum.SupportedValue with a new calloc() without freeing the previous allocation from line 857. The original array and any string values it contains are leaked on every property descriptor parse. Commit 404ff02c75f3cb280196fc260a63c4d26cf1a8f6 fixes the issue.(CVE-2026-40336)</p> https://cve.radiocsirt.org/vuln/oesa-2026-2785 https://cve.radiocsirt.org/vuln/opensuse-su-2026:10916-1 <p>libgphoto2-6-2.5.34-1.1 on GA media</p> <p>libgphoto2-6-2.5.34-1.1 on GA media</p> https://cve.radiocsirt.org/vuln/opensuse-su-2026:10916-1 https://cve.radiocsirt.org/vuln/ubuntu-cve-2026-40333 <p><strong>Affected:</strong> Ubuntu:14.04:LTS: libgphoto2, Ubuntu:16.04:LTS: libgphoto2, Ubuntu:18.04:LTS: libgphoto2, Ubuntu:20.04:LTS: libgphoto2, Ubuntu:22.04:LTS: libgphoto2, Ubuntu:24.04:LTS: libgphoto2, Ubuntu:25.10: libgphoto2, Ubuntu:26.04:LTS: libgphoto2</p> <p>libgphoto2 is a camera access and control library. In versions up to and including 2.5.33, two functions in camlibs/ptp2/ptp-pack.c accept a data pointer but no length parameter, performing unbounded reads. Their callers in ptp_unpack_EOS_events() have xsize available but never pass it, leaving both functions unable to validate reads against the actual buffer boundary. Commit 1817ecead20c2aafa7549dac9619fe38f47b2f53 patches the issue.</p> <p><strong>Affected:</strong> Ubuntu:14.04:LTS: libgphoto2, Ubuntu:16.04:LTS: libgphoto2, Ubuntu:18.04:LTS: libgphoto2, Ubuntu:20.04:LTS: libgphoto2, Ubuntu:22.04:LTS: libgphoto2, Ubuntu:24.04:LTS: libgphoto2, Ubuntu:25.10: libgphoto2, Ubuntu:26.04:LTS: libgphoto2</p> <p>libgphoto2 is a camera access and control library. In versions up to and including 2.5.33, two functions in camlibs/ptp2/ptp-pack.c accept a data pointer but no length parameter, performing unbounded reads. Their callers in ptp_unpack_EOS_events() have xsize available but never pass it, leaving both functions unable to validate reads against the actual buffer boundary. Commit 1817ecead20c2aafa7549dac9619fe38f47b2f53 patches the issue.</p> https://cve.radiocsirt.org/vuln/ubuntu-cve-2026-40333