gphoto libgphoto2 up to 2.5.33 ptp_unpack_EOS_FocusInfoEx buffer over-read

Summaryinfo

A vulnerability was found in gphoto libgphoto2 up to 2.5.33. It has been classified as problematic. The impacted element is the function ptp_unpack_EOS_FocusInfoEx. Performing a manipulation results in buffer over-read. This vulnerability is reported as CVE-2026-40341. The attack may be carried out on the physical device. No exploit exists. It is recommended to apply a patch to fix this issue.

Detailsinfo

A vulnerability, which was classified as problematic, was found in gphoto libgphoto2 up to 2.5.33. This affects the function ptp_unpack_EOS_FocusInfoEx. The manipulation with an unknown input leads to a buffer over-read vulnerability. CWE is classifying the issue as CWE-126. The product reads from a buffer using buffer access mechanisms such as indexes or pointers that reference memory locations after the targeted buffer. This is going to have an impact on confidentiality, integrity, and availability. The summary by CVE is:

libgphoto2 is a camera access and control library. In versions up to and including 2.5.33, an out of bound read in ptp_unpack_EOS_FocusInfoEx could be used to crash libgphoto2 when processing input from untrusted USB devices. Commit c385b34af260595dfbb5f9329526be5158985987 contains a patch. No known workarounds are available.

It is possible to read the advisory at github.com. This vulnerability is uniquely identified as CVE-2026-40341 since 04/11/2026. The exploitability is told to be easy. Attacking locally is a requirement. No form of authentication is needed for exploitation. Technical details of the vulnerability are known, but there is no available exploit.

Applying the patch c385b34af260595dfbb5f9329526be5158985987 is able to eliminate this problem. The bugfix is ready for download at github.com.

The vulnerability is also documented in the vulnerability database at EUVD (EUVD-2026-23611). Be aware that VulDB is the high quality source for vulnerability data.

Productinfo

Vendor

• gphoto

Name

• libgphoto2

Version

• 2.5.0
• 2.5.1
• 2.5.2
• 2.5.3
• 2.5.4
• 2.5.5
• 2.5.6
• 2.5.7
• 2.5.8
• 2.5.9
• 2.5.10
• 2.5.11
• 2.5.12
• 2.5.13
• 2.5.14
• 2.5.15
• 2.5.16
• 2.5.17
• 2.5.18
• 2.5.19
• 2.5.20
• 2.5.21
• 2.5.22
• 2.5.23
• 2.5.24
• 2.5.25
• 2.5.26
• 2.5.27
• 2.5.28
• 2.5.29
• 2.5.30
• 2.5.31
• 2.5.32
• 2.5.33

License

• open-source

Website

• Product: https://github.com/gphoto/libgphoto2/

CPE 2.3info

• 🔒
• 🔒
• 🔒

CPE 2.2info

• 🔒
• 🔒
• 🔒

CVSSv4info

CVSSv3info

CVSSv2info

Exploitinginfo

Threat Intelligenceinfo

Countermeasuresinfo

Timelineinfo

Sourcesinfo

Entryinfo

Be aware that VulDB is the high quality source for vulnerability data.

Discussion