CVE-2026-120451

A flaw was found in libgphoto2. An attacker can execute arbitrary code or cause a denial of service DoS by connecting a malicious USB device to the system. This vulnerability occurs because the jl2005c camera driver fails to validate the allocation table entry count during device initialization,...

PT-2026-135467

Name of the Vulnerable Software and Affected Versions libgphoto2 versions prior to 2.5.35 Description Stack-based and heap-based buffer overflows exist in the jl2005c init function. A malicious USB device, such as a spoofed Jeilin JL2005B/C/D camera, can corrupt memory by providing an unbounded...