Buffer Overflow Vulnerabilities in libgphoto2 Camera Driver

CVE-2026-120451

What is CVE-2026-120451?

The libgphoto2 library through version 2.5.34 is susceptible to both stack-based and heap-based buffer overflow vulnerabilities in the jl2005c_init() function. This issue can be exploited by attaching a malicious USB device masquerading as a Jeilin JL2005B/C/D camera, which can report an excessive number of entries—specifically 1022 or more. The resulting unbound allocation table entry count may lead to memory corruption, as the attack allows overwriting of the saved return address and heap data. Such exploitation could enable an attacker to potentially execute arbitrary code.

References