PT-2026-33523 · Unknown · Libgphoto2

Published 2026-04-17 · Updated 2026-04-20 · CVE-2026-40333

Positive Technologies (AI Summary)

CVSS v3.1

6.1

Medium

Base vector

AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H

Name of the Vulnerable Software and Affected Versions libgphoto2 versions prior to 2.5.34

Description Two functions in camlibs/ptp2/ptp-pack.c accept a data pointer without a length parameter, leading to unbounded reads. The calling function ptp unpack EOS events() possesses the xsize variable but fails to pass it, preventing the functions from validating reads against the buffer boundary.

Recommendations Update to version 2.5.34 or later.

Fix

Out of bounds Read

Weakness Enumeration

CWE-125

Related Identifiers

CVE-2026-40333

Affected Products

Libgphoto2

References · 10

• https://cve.org/CVERecord?id=CVE-2026-40333 · Security Note
• https://security-tracker.debian.org/tracker/CVE-2026-40333 · Vendor Advisory
• https://osv.dev/vulnerability/UBUNTU-CVE-2026-40333 · Vendor Advisory
• https://ubuntu.com/security/CVE-2026-40333 · Vendor Advisory
• https://osv.dev/vulnerability/DEBIAN-CVE-2026-40333 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2026-40333 · Security Note
• https://github.com/gphoto/libgphoto2/security/advisories/GHSA-hq94-cp6h-3gjp · Note
• https://github.com/gphoto/libgphoto2/commit/1817ecead20c2aafa7549dac9619fe38f47b2f53 · Note
• https://twitter.com/CVEnew/status/2045467363491868752 · Twitter Post
• https://twitter.com/VulmonFeeds/status/2045342522092794202 · Twitter Post