What’s Vulnerable › Products

gphoto libgphoto2 vulnerabilities

8 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 8 published in the last 12 months.

Check whether your gphoto libgphoto2 version is affected

Latest gphoto libgphoto2 vulnerabilities

• CVE-2026-40341 — libgphoto2 has an OOB Read in ptp_unpack_EOS_FocusInfoEx (CVSS 3.5)
• CVE-2026-40340 — libgphoto2 has OOB read in ptp_unpack_OI() in ptp-pack.c via malicious PTP ObjectInfo response (CVSS 6.1)
• CVE-2026-40339 — libgphoto2 has OOB read in ptp_unpack_Sony_DPD() FormFlag parsing in ptp-pack.c (CVSS 5.2)
• CVE-2026-40338 — libgphoto2 has OOB read in ptp_unpack_Sony_DPD() enumeration count parsing in ptp-pack.c (CVSS 5.2)
• CVE-2026-40336 — libgphoto2 has memory leak in ptp_unpack_Sony_DPD() secondary enumeration list in ptp-pack.c (CVSS 2.4)
• CVE-2026-40335 — libgphoto2 has OOB read in ptp_unpack_DPV() UINT128/INT128 handling in ptp-pack.c (CVSS 5.2)
• CVE-2026-40334 — libgphoto2 missing null termination in ptp_unpack_Canon_FE() filename buffer in ptp-pack.c (CVSS 3.5)
• CVE-2026-40333 — libgphoto2 has OOB read in ptp_unpack_EOS_ImageFormat() and ptp_unpack_EOS_CustomFuncEx() due to missing length parameter in ptp-pack.c (CVSS 6.1)