AZL-112520: CVE-2026-120451 affecting package libgphoto2 2.5.31-1

Q: Who is realistically exposed to this issue?

Systems using libgphoto2 that can interact with USB cameras are exposed when a malicious or spoofed Jeilin JL2005B, JL2005C, or JL2005D device can be connected. Exploitation requires the device to present an allocation table with 1022 or more entries.

Q: What does an attacker need to exploit the vulnerability?

An attacker needs the ability to connect a malicious USB device that impersonates a vulnerable Jeilin camera model. The crafted device supplies an unbounded allocation table entry count to jl2005c_init(), causing stack and heap memory corruption.

Q: What is the potential impact of successful exploitation?

A malicious device can overwrite heap data and the saved return address. This may allow the attacker to achieve code execution.

Published Nov 2, 2026

Updated

libgphoto2 through 2.5.34 contains stack-based and heap-based buffer overflow vulnerabilities in jl2005cinit() that allow malicious USB devices to corrupt memory by supplying an unbounded allocation table entry count. Attackers can connect a spoofed Jeilin JL2005B/C/D camera reporting 1022 or more entries to overwrite the saved return address and heap data, potentially achieving code execution.

Affected Software

1 affected component

azure-linux/libgphoto2<=2.5.31-1

Event History

Nov 2, 2026

Advisory Published

via OSV·03:17 PM

Data Sourced

via OSV·03:17 PM

DescriptionAffected Software

Child vulnerabilities

Contains the following vulnerabilities.

CVE-2026-120451

Frequently Asked Questions

Who is realistically exposed to this issue?

Systems using libgphoto2 that can interact with USB cameras are exposed when a malicious or spoofed Jeilin JL2005B, JL2005C, or JL2005D device can be connected. Exploitation requires the device to present an allocation table with 1022 or more entries.

What does an attacker need to exploit the vulnerability?

An attacker needs the ability to connect a malicious USB device that impersonates a vulnerable Jeilin camera model. The crafted device supplies an unbounded allocation table entry count to jl2005c_init(), causing stack and heap memory corruption.

What is the potential impact of successful exploitation?

A malicious device can overwrite heap data and the saved return address. This may allow the attacker to achieve code execution.

AZL-112520: CVE-2026-120451 affecting package libgphoto2 2.5.31-1

Affected Software

Event History

Child vulnerabilities

Frequently Asked Questions

Who is realistically exposed to this issue?

What does an attacker need to exploit the vulnerability?

What is the potential impact of successful exploitation?

Company

Resources

Contact

Frequently Asked Questions

Who is realistically exposed to this issue?

What does an attacker need to exploit the vulnerability?

What is the potential impact of successful exploitation?