Read the docs

gphoto

Records10All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical0CVSS 9.0–10.0
CVSS high1CVSS 7.0–8.9

Exploited now

gphoto records in CISA KEV

No gphoto vulnerabilities are listed in CISA KEV.

Records

10 records

Priority HIGH 66

libgphoto2 through 2.5.34 contains stack-based and heap-based buffer overflow vulnerabilities in jl2005c_init() that allow malicious USB devices to corrupt memory by supplying an unbounded allocation table entry count.

CVSS 4.0HIGH 7.0 Physical No auth No interaction EPSS 0.00225 Published 2026-11-02 No fix listed CWE-787
Priority LOW 23

libgphoto2 through 2.5.34 contains a heap out-of-bounds read and write vulnerability in jl2005bcd_decompress() that allows malicious USB cameras to corrupt heap memory via oversized thumbnail processing.

CVSS 4.0MEDIUM 5.2 Physical No auth User interaction EPSS 0.00185 Published 2026-11-02 Fix deferred CWE-787
Open these records in search →