CVE-2026-40333: Gphoto LIBGPHOTO2

Medium severity, CVSS 6.1. EPSS: 0.3% chance of exploitation in the next 30 days.

libgphoto2 is a camera access and control library. In versions up to and including 2.5.33, two functions in camlibs/ptp2/ptp-pack.c accept a data pointer but no length parameter, performing unbounded reads. Their callers in ptp_unpack_EOS_events() have xsize available but never pass it, leaving both functions unable to validate reads against the actual buffer boundary. Commit 1817ecead20c2aafa7549dac9619fe38f47b2f53 patches the issue.

Affected products

• Gphoto LIBGPHOTO2: up to and including 2.5.33

Published 2026-04-18. Last modified 2026-06-17.