UBUNTU-CVE-2026-120452: Medium severity ubuntu/libgphoto2 vulnerability
libgphoto2 through 2.5.34 contains a heap out-of-bounds read and write vulnerability in jl2005bcddecompress() that allows malicious USB cameras to corrupt heap memory via oversized thumbnail processing. Attackers can supply small allocation-table values and a thumbnail header byte so in-place byte-swapping exceeds the buffer by about 30 KB, leaking heap contents in preview images.
Affected Software
Event History
Frequently Asked Questions
Which systems are exposed to this issue?
Systems using libgphoto2 to process thumbnails from USB cameras are exposed. The vulnerable processing occurs in the jl2005bcd_decompress() path when handling a crafted camera thumbnail.
What does an attacker need to exploit it?
An attacker needs to provide a malicious USB camera that supplies small allocation-table values and a crafted thumbnail header byte. Processing that thumbnail can cause in-place byte swapping to exceed the allocated buffer by about 30 KB.
What impact can exploitation have?
The out-of-bounds heap read and write can corrupt heap memory. Heap contents may also be leaked through generated preview images.