DEBIAN-CVE-2026-120452: Medium severity debian/libgphoto2 vulnerability
libgphoto2 through 2.5.34 contains a heap out-of-bounds read and write vulnerability in jl2005bcddecompress() that allows malicious USB cameras to corrupt heap memory via oversized thumbnail processing. Attackers can supply small allocation-table values and a thumbnail header byte so in-place byte-swapping exceeds the buffer by about 30 KB, leaking heap contents in preview images.
Affected Software
Event History
Frequently Asked Questions
What must an attacker control to trigger the issue?
The attacker needs to present a malicious USB camera with crafted thumbnail data. Exploitation relies on small allocation-table values and a thumbnail header byte that causes in-place byte-swapping to exceed the allocated buffer.
Which versions are identified as affected?
The issue is reported in libgphoto2 through version 2.5.34.
What is the observed impact of successful exploitation?
The out-of-bounds access can corrupt heap memory and leak heap contents through preview images. The reported overwrite extends beyond the buffer by approximately 30 KB during thumbnail processing.