OESA-2026-2785

See a problem?
Please try reporting it to the source first.

Source

https://www.openeuler.org/en/security/security-bulletins/detail/?id=openEuler-SA-2026-2785

Import Source

https://repo.openeuler.org/security/data/osv/OESA-2026-2785.json

JSON Data

https://api.osv.dev/v1/vulns/OESA-2026-2785

Upstream

CVE-2026-40333

CVE-2026-40336

Published

2026-06-24T11:11:42Z

Modified

2026-08-18T01:21:12.158709530Z

Severity

6.1 (Medium) CVSS_V3 - CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H CVSS Calculator

Summary

libgphoto2 security update

Details

is the core of gphoto2 software. It is a portable library which gives access to literally hundreds of digital cameras.

Security Fix(es):

libgphoto2 is a camera access and control library. In versions up to and including 2.5.33, two functions in camlibs/ptp2/ptp-pack.c accept a data pointer but no length parameter, performing unbounded reads. Their callers in ptpunpackEOS_events() have xsize available but never pass it, leaving both functions unable to validate reads against the actual buffer boundary. Commit 1817ecead20c2aafa7549dac9619fe38f47b2f53 patches the issue.(CVE-2026-40333)

libgphoto2 is a camera access and control library. Versions up to and including 2.5.33 have a memory leak in ptp_unpack_Sony_DPD() in camlibs/ptp2/ptp-pack.c (lines 884–885). When processing a secondary enumeration list (introduced in 2024+ Sony cameras), the function overwrites dpd->FORM.Enum.SupportedValue with a new calloc() without freeing the previous allocation from line 857. The original array and any string values it contains are leaked on every property descriptor parse. Commit 404ff02c75f3cb280196fc260a63c4d26cf1a8f6 fixes the issue.(CVE-2026-40336)

Database specific

{
    "severity": "Medium"
}

References

Affected packages

openEuler:24.03-LTS-SP1 / libgphoto2

Package

Name: libgphoto2
Purl: pkg:rpm/openEuler/libgphoto2&distro=openEuler-24.03-LTS-SP1

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

2.5.34-1.oe2403sp1

Ecosystem specific

{
    "x86_64": [
        "libgphoto2-2.5.34-1.oe2403sp1.x86_64.rpm",
        "libgphoto2-debuginfo-2.5.34-1.oe2403sp1.x86_64.rpm",
        "libgphoto2-debugsource-2.5.34-1.oe2403sp1.x86_64.rpm",
        "libgphoto2-devel-2.5.34-1.oe2403sp1.x86_64.rpm"
    ],
    "aarch64": [
        "libgphoto2-2.5.34-1.oe2403sp1.aarch64.rpm",
        "libgphoto2-debuginfo-2.5.34-1.oe2403sp1.aarch64.rpm",
        "libgphoto2-debugsource-2.5.34-1.oe2403sp1.aarch64.rpm",
        "libgphoto2-devel-2.5.34-1.oe2403sp1.aarch64.rpm"
    ],
    "src": [
        "libgphoto2-2.5.34-1.oe2403sp1.src.rpm"
    ],
    "noarch": [
        "libgphoto2-help-2.5.34-1.oe2403sp1.noarch.rpm"
    ]
}

Database specific

source

"https://repo.openeuler.org/security/data/osv/OESA-2026-2785.json"

openEuler:24.03-LTS-SP3 / libgphoto2

Package

Name: libgphoto2
Purl: pkg:rpm/openEuler/libgphoto2&distro=openEuler-24.03-LTS-SP3

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

2.5.34-1.oe2403sp3

Ecosystem specific

{
    "x86_64": [
        "libgphoto2-2.5.34-1.oe2403sp3.x86_64.rpm",
        "libgphoto2-debuginfo-2.5.34-1.oe2403sp3.x86_64.rpm",
        "libgphoto2-debugsource-2.5.34-1.oe2403sp3.x86_64.rpm",
        "libgphoto2-devel-2.5.34-1.oe2403sp3.x86_64.rpm"
    ],
    "aarch64": [
        "libgphoto2-2.5.34-1.oe2403sp3.aarch64.rpm",
        "libgphoto2-debuginfo-2.5.34-1.oe2403sp3.aarch64.rpm",
        "libgphoto2-debugsource-2.5.34-1.oe2403sp3.aarch64.rpm",
        "libgphoto2-devel-2.5.34-1.oe2403sp3.aarch64.rpm"
    ],
    "src": [
        "libgphoto2-2.5.34-1.oe2403sp3.src.rpm"
    ],
    "noarch": [
        "libgphoto2-help-2.5.34-1.oe2403sp3.noarch.rpm"
    ]
}

Database specific

source

"https://repo.openeuler.org/security/data/osv/OESA-2026-2785.json"

openEuler:20.03-LTS-SP4 / libgphoto2

Package

Name: libgphoto2
Purl: pkg:rpm/openEuler/libgphoto2&distro=openEuler-20.03-LTS-SP4

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

2.5.34-1.oe2003sp4

Ecosystem specific

{
    "x86_64": [
        "libgphoto2-2.5.34-1.oe2003sp4.x86_64.rpm",
        "libgphoto2-debuginfo-2.5.34-1.oe2003sp4.x86_64.rpm",
        "libgphoto2-debugsource-2.5.34-1.oe2003sp4.x86_64.rpm",
        "libgphoto2-devel-2.5.34-1.oe2003sp4.x86_64.rpm"
    ],
    "aarch64": [
        "libgphoto2-2.5.34-1.oe2003sp4.aarch64.rpm",
        "libgphoto2-debuginfo-2.5.34-1.oe2003sp4.aarch64.rpm",
        "libgphoto2-debugsource-2.5.34-1.oe2003sp4.aarch64.rpm",
        "libgphoto2-devel-2.5.34-1.oe2003sp4.aarch64.rpm"
    ],
    "src": [
        "libgphoto2-2.5.34-1.oe2003sp4.src.rpm"
    ],
    "noarch": [
        "libgphoto2-help-2.5.34-1.oe2003sp4.noarch.rpm"
    ]
}

Database specific

source

"https://repo.openeuler.org/security/data/osv/OESA-2026-2785.json"

openEuler:22.03-LTS-SP4 / libgphoto2

Package

Name: libgphoto2
Purl: pkg:rpm/openEuler/libgphoto2&distro=openEuler-22.03-LTS-SP4

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

2.5.34-1.oe2203sp4

Ecosystem specific

{
    "x86_64": [
        "libgphoto2-2.5.34-1.oe2203sp4.x86_64.rpm",
        "libgphoto2-debuginfo-2.5.34-1.oe2203sp4.x86_64.rpm",
        "libgphoto2-debugsource-2.5.34-1.oe2203sp4.x86_64.rpm",
        "libgphoto2-devel-2.5.34-1.oe2203sp4.x86_64.rpm"
    ],
    "aarch64": [
        "libgphoto2-2.5.34-1.oe2203sp4.aarch64.rpm",
        "libgphoto2-debuginfo-2.5.34-1.oe2203sp4.aarch64.rpm",
        "libgphoto2-debugsource-2.5.34-1.oe2203sp4.aarch64.rpm",
        "libgphoto2-devel-2.5.34-1.oe2203sp4.aarch64.rpm"
    ],
    "src": [
        "libgphoto2-2.5.34-1.oe2203sp4.src.rpm"
    ],
    "noarch": [
        "libgphoto2-help-2.5.34-1.oe2203sp4.noarch.rpm"
    ]
}

Database specific

source

"https://repo.openeuler.org/security/data/osv/OESA-2026-2785.json"