CVE catalog

CVE-2026-40341

libgphoto2 is a camera access and control library. In versions up to and including 2.5.33, an out of bound read in ptp_unpack_EOS_FocusInfoEx could be used to crash libgphoto2 when processing input fr

[CVE catalog]

Severity
Medium · CVSS 4.6CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Published
Source
[NVD] · [CVE record]
EPSS
0.19% · Oct 25, 2026

libgphoto2 is a camera access and control library. In versions up to and including 2.5.33, an out of bound read in ptp_unpack_EOS_FocusInfoEx could be used to crash libgphoto2 when processing input from untrusted USB devices. Commit c385b34af260595dfbb5f9329526be5158985987 contains a patch. No known workarounds are available.

Vulnerable and fixed packages

Distribution-reported package versions and fixes. These do not depend on matching against the OpenFactory package catalog.

DistributionPackageReleaseVersionStatus
Debianlibgphoto2sid2.5.34-2fixed
Debianlibgphoto2forky2.5.34-2fixed
Debianlibgphoto2trixie2.5.31-4vulnerable
Debianlibgphoto2bookworm2.5.30-1vulnerable
Cpelibgphoto2Not reportedNot reportedvulnerable
Ubuntulibgphoto2noble2.5.31-2.1ubuntu1.1fixed
Ubuntulibgphoto2-6t64noble2.5.31-2.1ubuntu1.1fixed
Ubuntulibgphoto2-devnoble2.5.31-2.1ubuntu1.1fixed
Ubuntulibgphoto2-dev-docnoble2.5.31-2.1ubuntu1.1fixed
Ubuntulibgphoto2-l10nnoble2.5.31-2.1ubuntu1.1fixed
Ubuntulibgphoto2-port12t64noble2.5.31-2.1ubuntu1.1fixed
Ubuntulibgphoto214.042.5.2-0ubuntu5vulnerable
Ubuntulibgphoto214.042.5.2-0ubuntu6vulnerable
Ubuntulibgphoto214.042.5.3.1-0ubuntu1vulnerable
Ubuntulibgphoto214.042.5.3.1-1ubuntu2vulnerable
Ubuntulibgphoto214.042.5.3.1-1ubuntu2.2vulnerable
Ubuntulibgphoto216.042.5.8-1vulnerable
Ubuntulibgphoto216.042.5.8-2vulnerable
Ubuntulibgphoto216.042.5.8-3vulnerable
Ubuntulibgphoto216.042.5.9-2vulnerable
Ubuntulibgphoto216.042.5.9-3vulnerable
Ubuntulibgphoto218.042.5.14-1vulnerable
Ubuntulibgphoto218.042.5.16-2vulnerable
Ubuntulibgphoto220.042.5.23-2vulnerable
Ubuntulibgphoto220.042.5.24-1vulnerable
Ubuntulibgphoto220.042.5.25-0ubuntu0.1vulnerable
Ubuntulibgphoto222.042.5.27-1vulnerable
Ubuntulibgphoto222.042.5.27-1build1vulnerable
Ubuntulibgphoto222.042.5.27-1build2vulnerable
Ubuntulibgphoto222.042.5.27-1ubuntu0.1fixed
Ubuntulibgphoto224.042.5.30-1vulnerable
Ubuntulibgphoto224.042.5.31-1vulnerable
Ubuntulibgphoto224.042.5.31-2vulnerable
Ubuntulibgphoto224.042.5.31-2.1build1vulnerable
Ubuntulibgphoto224.042.5.31-2.1build2vulnerable
Ubuntulibgphoto224.042.5.31-2.1ubuntu1vulnerable
Ubuntulibgphoto224.042.5.31-2.1ubuntu1.1fixed
Ubuntulibgphoto225.102.5.31-4vulnerable
Ubuntulibgphoto225.102.5.31-4build1vulnerable
Ubuntulibgphoto225.102.5.31-4ubuntu1vulnerable
Ubuntulibgphoto226.042.5.31-4build1vulnerable
Ubuntulibgphoto226.042.5.32-1vulnerable
Ubuntulibgphoto226.042.5.33-1vulnerable
Ubuntulibgphoto226.042.5.33-1ubuntu1vulnerable
Ubuntulibgphoto226.042.5.33-1ubuntu1.1fixed

Fixed-version evidence

DistributionPackageTypeReleaseFixed versionUrgencyOriginBugs
Debianlibgphoto2sourcesid2.5.34-1not yet assignedNot reported[1134329]
Debianlibgphoto2sourceforky2.5.34-1not yet assignedNot reported[1134329]
Debianlibgphoto2sourcetrixie(unfixed)not yet assignedNot reported[1134329]
Debianlibgphoto2sourcebookworm(unfixed)not yet assignedNot reported[1134329]
Ubuntulibgphoto2debnoble2.5.31-2.1ubuntu1.1Not reportedNot reportedNot reported
Ubuntulibgphoto2-6t64debnoble2.5.31-2.1ubuntu1.1Not reportedNot reportedNot reported
Ubuntulibgphoto2-devdebnoble2.5.31-2.1ubuntu1.1Not reportedNot reportedNot reported
Ubuntulibgphoto2-dev-docdebnoble2.5.31-2.1ubuntu1.1Not reportedNot reportedNot reported
Ubuntulibgphoto2-l10ndebnoble2.5.31-2.1ubuntu1.1Not reportedNot reportedNot reported
Ubuntulibgphoto2-port12t64debnoble2.5.31-2.1ubuntu1.1Not reportedNot reportedNot reported
Ubuntulibgphoto2deb22.042.5.27-1ubuntu0.1Not reportedUBUNTU-CVE-2026-40341Not reported
Ubuntulibgphoto2deb24.042.5.31-2.1ubuntu1.1Not reportedUBUNTU-CVE-2026-40341Not reported
Ubuntulibgphoto2deb26.042.5.33-1ubuntu1.1Not reportedUBUNTU-CVE-2026-40341Not reported

[Debian bug #1134329]

Notes

[trixie] libgphoto2: Minor issue [bookworm] libgphoto2: Minor issue

OpenFactory catalog packages

[Debian 12 (Bookworm)]

  • [libgphoto2-6]Affected

    Source package: [libgphoto2]

    Details (2)

    • 2.5.30-1 · amd64 · bookworm

      Affected

      nvd · libgphoto2 · debian · bookworm; nvd · libgphoto2 · debian · 12

    • 2.5.30-1 · arm64 · bookworm

      Affected

      nvd · libgphoto2 · debian · bookworm; nvd · libgphoto2 · debian · 12

  • [libgphoto2-dev]Affected

    Source package: [libgphoto2]

    Details (2)

    • 2.5.30-1 · amd64 · bookworm

      Affected

      nvd · libgphoto2 · debian · bookworm; nvd · libgphoto2 · debian · 12

    • 2.5.30-1 · arm64 · bookworm

      Affected

      nvd · libgphoto2 · debian · bookworm; nvd · libgphoto2 · debian · 12

  • [libgphoto2-dev-doc]Affected

    Source package: [libgphoto2]

    Details (2)

    • 2.5.30-1 · all · bookworm

      Affected

      nvd · libgphoto2 · debian · bookworm; nvd · libgphoto2 · debian · 12

    • 2.5.30-1 · all · bookworm

      Affected

      nvd · libgphoto2 · debian · bookworm; nvd · libgphoto2 · debian · 12

  • [libgphoto2-l10n]Affected

    Source package: [libgphoto2]

    Details (2)

    • 2.5.30-1 · all · bookworm

      Affected

      nvd · libgphoto2 · debian · bookworm; nvd · libgphoto2 · debian · 12

    • 2.5.30-1 · all · bookworm

      Affected

      nvd · libgphoto2 · debian · bookworm; nvd · libgphoto2 · debian · 12

  • [libgphoto2-port12]Affected

    Source package: [libgphoto2]

    Details (2)

    • 2.5.30-1 · amd64 · bookworm

      Affected

      nvd · libgphoto2 · debian · bookworm; nvd · libgphoto2 · debian · 12

    • 2.5.30-1 · arm64 · bookworm

      Affected

      nvd · libgphoto2 · debian · bookworm; nvd · libgphoto2 · debian · 12

[Debian 13 (Trixie)]

  • [libgphoto2-6t64]Affected

    Source package: [libgphoto2]

    Details (2)

    • 2.5.31-4 · amd64 · trixie

      Affected

      nvd · libgphoto2 · debian · 13

    • 2.5.31-4 · arm64 · trixie

      Affected

      nvd · libgphoto2 · debian · 13

  • [libgphoto2-dev]Affected

    Source package: [libgphoto2]

    Details (2)

    • 2.5.31-4 · amd64 · trixie

      Affected

      nvd · libgphoto2 · debian · 13

    • 2.5.31-4 · arm64 · trixie

      Affected

      nvd · libgphoto2 · debian · 13

  • [libgphoto2-dev-doc]Affected

    Source package: [libgphoto2]

    Details (2)

    • 2.5.31-4 · all · trixie

      Affected

      nvd · libgphoto2 · debian · 13

    • 2.5.31-4 · all · trixie

      Affected

      nvd · libgphoto2 · debian · 13

  • [libgphoto2-l10n]Affected

    Source package: [libgphoto2]

    Details (2)

    • 2.5.31-4 · all · trixie

      Affected

      nvd · libgphoto2 · debian · 13

    • 2.5.31-4 · all · trixie

      Affected

      nvd · libgphoto2 · debian · 13

  • [libgphoto2-port12t64]Affected

    Source package: [libgphoto2]

    Details (2)

    • 2.5.31-4 · amd64 · trixie

      Affected

      nvd · libgphoto2 · debian · 13

    • 2.5.31-4 · arm64 · trixie

      Affected

      nvd · libgphoto2 · debian · 13

Observed:

References

[Debian Security Tracker] · [FIRST EPSS] · [National Vulnerability Database (NVD)] · [OSV Package Vulnerability Database] · [Red Hat security advisories and VEX] · [SUSE security advisories and VEX] · [Ubuntu Security Notices (USN)]