{"id":"AZL-112520","summary":"CVE-2026-120451 affecting package libgphoto2 2.5.31-1","details":"libgphoto2 through 2.5.34 contains stack-based and heap-based buffer overflow vulnerabilities in jl2005c_init() that allow malicious USB devices to corrupt memory by supplying an unbounded allocation table entry count. Attackers can connect a spoofed Jeilin JL2005B/C/D camera reporting 1022 or more entries to overwrite the saved return address and heap data, potentially achieving code execution.","modified":"2026-11-04T05:34:56Z","published":"2026-11-02T15:17:28Z","upstream":["CVE-2026-120451"],"references":[{"type":"WEB","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-120451"}],"affected":[{"package":{"name":"libgphoto2","ecosystem":"Azure Linux:3","purl":"pkg:rpm/azure-linux/libgphoto2"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"last_affected":"2.5.31-1"}]}],"database_specific":{"source":"https://github.com/microsoft/AzureLinuxVulnerabilityData/blob/main/osv/AZL-112520.json"}}],"schema_version":"1.9.2"}