CVE-2026-120451— libgphoto2 through 2.5.34 Buffer Overflow via jl2005c Camera Driver

Quick assessment

Affected

gPhoto libgphoto2

Exploitation

No confirmed in-the-wild exploitation; assess based on exposure

Recommended action

Check the vendor advisory and references for a fixed version. If immediate upgrade is impossible, restrict exposure and increase monitoring.

libgphoto2 2.5.34 及以下版本在函数中存在基于栈和基于堆的缓冲区溢出漏洞。恶意 USB 设备可通过提供无上限的分配表条目数量来破坏内存。攻击者可连接一个伪造的 Jeilin JL2005B/C/D 相机，使其报告 1022 个或更多条目，从而覆盖保存的返回地址和堆数据，进而可能实现代码执行。

CVSS 6.8 · Medium Updated Nov 02, 2026

Possible ATT&CK Techniques 2 AI

T1203 · Exploitation for Client Execution T1190 · Exploit Public-Facing Application

Affected Version Matrix 1

Vendor	Product	Version Range	Status
gPhoto	libgphoto2	`≤ 2.5.34`	affected

Get alerts for future matching vulnerabilities Log in to subscribe

Vulnerability Information

Have questions about the vulnerability? See if Shenlong's analysis helps!

View Shenlong Deep Dive ↗

Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.

Vulnerability Title

libgphoto2 through 2.5.34 Buffer Overflow via jl2005c Camera Driver

Source: CVE Program / CVE List V5

Vulnerability Description

libgphoto2 through 2.5.34 contains stack-based and heap-based buffer overflow vulnerabilities in jl2005c_init() that allow malicious USB devices to corrupt memory by supplying an unbounded allocation table entry count. Attackers can connect a spoofed Jeilin JL2005B/C/D camera reporting 1022 or more entries to overwrite the saved return address and heap data, potentially achieving code execution.

Source: CVE Program / CVE List V5

CVSS Information

CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Source: CVE Program / CVE List V5

Vulnerability Type

跨界内存写

Source: CVE Program / CVE List V5

Affected Products

Vendor	Product	Affected Versions	CPE	Subscribe
gPhoto	libgphoto2	0 ~ 2.5.34	-

II. Public POCs for CVE-2026-120451

#	POC Description	Source Link	Shenlong Link

AI-Generated POC Premium

No public POC found.

III. Intelligence Information for CVE-2026-120451

请登录查看更多情报信息。

Other References for CVE-2026-120451 (6)

https://hackmd.io/@haindpwn/libgphoto2-jl2005c-init-alloc-table-buffer-overflow technical-description
https://github.com/gphoto/libgphoto2/commit/6a3393dd996502457ab965432cf0b2035278825e patch
https://github.com/gphoto/libgphoto2/issues/1326 issue-tracking
https://github.com/gphoto/libgphoto2/commit/af3b8e9c542cda863fb5f2f3cfeb261bd78e4442 patch
https://github.com/gphoto/libgphoto2/blob/v2.5.34/camlibs/jl2005c/jl2005c.c#L138-L154 technical-description
https://www.vulncheck.com/advisories/libgphoto2-through-2.5.34-buffer-overflow-via-jl2005c-camera-driver third-party-advisory

https://www.cve.org/CVERecord?id=CVE-2026-120451

IV. Related Vulnerabilities

Same product: libgphoto2

Same vendor: gPhoto

Same weakness: CWE-787