AZL-112520
See a problem?- Import Source
- https://github.com/microsoft/AzureLinuxVulnerabilityData/blob/main/osv/AZL-112520.json
- JSON Data
- https://api.osv.dev/v1/vulns/AZL-112520
- Upstream
- Published
- 2026-11-02T15:17:28Z
- Modified
- 2026-11-04T05:34:56Z
- Summary
- CVE-2026-120451 affecting package libgphoto2 2.5.31-1
- Details
-
libgphoto2 through 2.5.34 contains stack-based and heap-based buffer overflow vulnerabilities in jl2005c_init() that allow malicious USB devices to corrupt memory by supplying an unbounded allocation table entry count. Attackers can connect a spoofed Jeilin JL2005B/C/D camera reporting 1022 or more entries to overwrite the saved return address and heap data, potentially achieving code execution.
- References