CVE-2026-40340

libgphoto2 (versions up to and including 2.5.33) contains an out-of-bounds read in ptp_unpack_OI() within camlibs/ptp2/ptp-pack.c (lines 530–563). The code validates len