DEBIAN-CVE-2026-120451: Buffer Overflow
libgphoto2 through 2.5.34 contains stack-based and heap-based buffer overflow vulnerabilities in jl2005cinit() that allow malicious USB devices to corrupt memory by supplying an unbounded allocation table entry count. Attackers can connect a spoofed Jeilin JL2005B/C/D camera reporting 1022 or more entries to overwrite the saved return address and heap data, potentially achieving code execution.
Affected Software
Event History
Frequently Asked Questions
Who is exposed to this issue?
Systems using libgphoto2 with a connected Jeilin JL2005B, JL2005C, or JL2005D camera are exposed if the device can present malicious USB responses. The attack is performed by a spoofed or malicious USB camera rather than through normal network access.
What does an attacker need to exploit it?
An attacker needs to connect a malicious USB device that impersonates a Jeilin JL2005B/C/D camera. The device must report an allocation table with at least 1022 entries to trigger the memory corruption.
What can be done if an update cannot be applied immediately?
Do not connect untrusted USB cameras, particularly devices claiming to be Jeilin JL2005B, JL2005C, or JL2005D models. Restrict physical USB access and use only trusted camera hardware until an update is available.