PT-2026-33539 · Unknown · Libgphoto2

Published 2026-04-17 · Updated 2026-04-25 · CVE-2026-40341

Positive Technologies (AI Summary)

CVSS v3.1

3.5

Low

Base vector

AV:P/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:L

Name of the Vulnerable Software and Affected Versions libgphoto2 versions prior to 2.5.34

Description An out of bound read occurs in the ptp unpack EOS FocusInfoEx() function when processing input from untrusted USB devices, which can lead to a crash of the library.

Recommendations Update to a version later than 2.5.33.

Fix

Buffer Over-read

Weakness Enumeration

CWE-126

Related Identifiers

CVE-2026-40341

OESA-2026-2067

OESA-2026-2068

OESA-2026-2069

OESA-2026-2070

OESA-2026-2071

Affected Products

Libgphoto2

References · 25

• https://nvd.nist.gov/vuln/detail/CVE-2026-40338 · Security Note
• https://cve.org/CVERecord?id=CVE-2026-40341 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2026-40340 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2026-40339 · Security Note
• https://ubuntu.com/security/CVE-2026-40341 · Vendor Advisory
• https://osv.dev/vulnerability/UBUNTU-CVE-2026-40341 · Vendor Advisory
• https://osv.dev/vulnerability/OESA-2026-2070 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2026-40341 · Security Note
• https://security-tracker.debian.org/tracker/CVE-2026-40341 · Vendor Advisory
• https://osv.dev/vulnerability/OESA-2026-2067 · Vendor Advisory
• https://osv.dev/vulnerability/OESA-2026-2071 · Vendor Advisory
• https://osv.dev/vulnerability/OESA-2026-2068 · Vendor Advisory
• https://osv.dev/vulnerability/OESA-2026-2069 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2026-40335 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2026-40334 · Security Note