{"id":"USN-8586-1","summary":"libgphoto2 vulnerabilities","details":"It was discovered that libgphoto2 did not properly validate buffer\nboundaries when parsing EOS image format data. An attacker with physical\naccess could possibly use this issue to obtain sensitive information.\n(CVE-2026-40333)\n\nIt was discovered that libgphoto2 did not properly null-terminate buffers\nwhen parsing Canon folder entries. An attacker with physical access could\npossibly use this issue to obtain sensitive information. (CVE-2026-40334)\n\nIt was discovered that libgphoto2 did not properly validate buffer\nboundaries when parsing device property values. An attacker with physical\naccess could possibly use this issue to obtain sensitive information.\n(CVE-2026-40335)\n\nIt was discovered that libgphoto2 had a memory leak when parsing Sony\ndevice property descriptors. An attacker with physical access could\npossibly use this issue to cause a denial of service. This issue only\naffected Ubuntu 26.04 LTS. (CVE-2026-40336)\n\nIt was discovered that libgphoto2 did not properly validate buffer\nboundaries when parsing Sony device property enumeration data. An attacker\nwith physical access could possibly use this issue to obtain sensitive\ninformation. (CVE-2026-40338)\n\nIt was discovered that libgphoto2 did not properly validate buffer\nboundaries when parsing Sony device property form flags. An attacker with\nphysical access could possibly use this issue to obtain sensitive\ninformation. (CVE-2026-40339)\n\nIt was discovered that libgphoto2 did not properly validate buffer\nboundaries when parsing object information. An attacker with physical\naccess could possibly use this issue to obtain sensitive information.\n(CVE-2026-40340)\n\nIt was discovered that libgphoto2 did not properly validate buffer\nboundaries when parsing EOS focus information. An attacker with physical\naccess could possibly use this issue to cause libgphoto2 to crash,\nresulting in a denial of service. (CVE-2026-40341)","modified":"2026-07-22T20:59:36.485849007Z","published":"2026-07-22T13:11:45Z","related":["UBUNTU-CVE-2026-40333","UBUNTU-CVE-2026-40334","UBUNTU-CVE-2026-40335","UBUNTU-CVE-2026-40336","UBUNTU-CVE-2026-40338","UBUNTU-CVE-2026-40339","UBUNTU-CVE-2026-40340","UBUNTU-CVE-2026-40341"],"upstream":["CVE-2026-40333","CVE-2026-40334","CVE-2026-40335","CVE-2026-40336","CVE-2026-40338","CVE-2026-40339","CVE-2026-40340","CVE-2026-40341","UBUNTU-CVE-2026-40333","UBUNTU-CVE-2026-40334","UBUNTU-CVE-2026-40335","UBUNTU-CVE-2026-40336","UBUNTU-CVE-2026-40338","UBUNTU-CVE-2026-40339","UBUNTU-CVE-2026-40340","UBUNTU-CVE-2026-40341"],"references":[{"type":"ADVISORY","url":"https://ubuntu.com/security/notices/USN-8586-1"},{"type":"REPORT","url":"https://ubuntu.com/security/CVE-2026-40333"},{"type":"REPORT","url":"https://ubuntu.com/security/CVE-2026-40334"},{"type":"REPORT","url":"https://ubuntu.com/security/CVE-2026-40335"},{"type":"REPORT","url":"https://ubuntu.com/security/CVE-2026-40336"},{"type":"REPORT","url":"https://ubuntu.com/security/CVE-2026-40338"},{"type":"REPORT","url":"https://ubuntu.com/security/CVE-2026-40339"},{"type":"REPORT","url":"https://ubuntu.com/security/CVE-2026-40340"},{"type":"REPORT","url":"https://ubuntu.com/security/CVE-2026-40341"}],"affected":[{"package":{"name":"libgphoto2","ecosystem":"Ubuntu:22.04:LTS","purl":"pkg:deb/ubuntu/libgphoto2?arch=source&distro=jammy"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.5.27-1ubuntu0.1"}]}],"versions":["2.5.27-1","2.5.27-1build1","2.5.27-1build2"],"ecosystem_specific":{"availability":"No subscription required","binaries":[{"binary_version":"2.5.27-1ubuntu0.1","binary_name":"libgphoto2-6"},{"binary_name":"libgphoto2-l10n","binary_version":"2.5.27-1ubuntu0.1"},{"binary_version":"2.5.27-1ubuntu0.1","binary_name":"libgphoto2-port12"}]},"database_specific":{"cves_map":{"ecosystem":"Ubuntu:22.04:LTS","cves":[{"id":"CVE-2026-40333","severity":[{"score":"CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H","type":"CVSS_V3"},{"score":"medium","type":"Ubuntu"}]},{"id":"CVE-2026-40334","severity":[{"score":"CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:L","type":"CVSS_V3"},{"type":"Ubuntu","score":"medium"}]},{"id":"CVE-2026-40335","severity":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:L"},{"type":"Ubuntu","score":"medium"}]},{"id":"CVE-2026-40338","severity":[{"score":"CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:L","type":"CVSS_V3"},{"score":"medium","type":"Ubuntu"}]},{"id":"CVE-2026-40339","severity":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:L"},{"type":"Ubuntu","score":"medium"}]},{"id":"CVE-2026-40340","severity":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H"},{"type":"Ubuntu","score":"medium"}]},{"severity":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:L"},{"type":"Ubuntu","score":"medium"}],"id":"CVE-2026-40341"}]},"source":"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/usn/USN-8586-1.json"}},{"package":{"name":"libgphoto2","ecosystem":"Ubuntu:24.04:LTS","purl":"pkg:deb/ubuntu/libgphoto2?arch=source&distro=noble"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.5.31-2.1ubuntu1.1"}]}],"versions":["2.5.30-1","2.5.31-1","2.5.31-2","2.5.31-2.1build1","2.5.31-2.1build2","2.5.31-2.1ubuntu1"],"ecosystem_specific":{"binaries":[{"binary_name":"libgphoto2-6t64","binary_version":"2.5.31-2.1ubuntu1.1"},{"binary_name":"libgphoto2-l10n","binary_version":"2.5.31-2.1ubuntu1.1"},{"binary_version":"2.5.31-2.1ubuntu1.1","binary_name":"libgphoto2-port12t64"}],"availability":"No subscription required"},"database_specific":{"source":"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/usn/USN-8586-1.json","cves_map":{"ecosystem":"Ubuntu:24.04:LTS","cves":[{"id":"CVE-2026-40333","severity":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H"},{"type":"Ubuntu","score":"medium"}]},{"id":"CVE-2026-40334","severity":[{"score":"CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:L","type":"CVSS_V3"},{"type":"Ubuntu","score":"medium"}]},{"severity":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:L"},{"type":"Ubuntu","score":"medium"}],"id":"CVE-2026-40335"},{"id":"CVE-2026-40338","severity":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:L"},{"type":"Ubuntu","score":"medium"}]},{"id":"CVE-2026-40339","severity":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:L"},{"type":"Ubuntu","score":"medium"}]},{"severity":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H"},{"type":"Ubuntu","score":"medium"}],"id":"CVE-2026-40340"},{"id":"CVE-2026-40341","severity":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:L"},{"score":"medium","type":"Ubuntu"}]}]}}},{"package":{"name":"libgphoto2","ecosystem":"Ubuntu:26.04:LTS","purl":"pkg:deb/ubuntu/libgphoto2?arch=source&distro=resolute"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.5.33-1ubuntu1.1"}]}],"versions":["2.5.31-4build1","2.5.32-1","2.5.33-1","2.5.33-1ubuntu1"],"ecosystem_specific":{"binaries":[{"binary_name":"libgphoto2-6t64","binary_version":"2.5.33-1ubuntu1.1"},{"binary_name":"libgphoto2-l10n","binary_version":"2.5.33-1ubuntu1.1"},{"binary_name":"libgphoto2-port12t64","binary_version":"2.5.33-1ubuntu1.1"}],"availability":"No subscription required"},"database_specific":{"source":"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/usn/USN-8586-1.json","cves_map":{"cves":[{"id":"CVE-2026-40333","severity":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H"},{"type":"Ubuntu","score":"medium"}]},{"severity":[{"score":"CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:L","type":"CVSS_V3"},{"type":"Ubuntu","score":"medium"}],"id":"CVE-2026-40334"},{"id":"CVE-2026-40335","severity":[{"score":"CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:L","type":"CVSS_V3"},{"score":"medium","type":"Ubuntu"}]},{"severity":[{"score":"CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","type":"CVSS_V3"},{"type":"Ubuntu","score":"medium"}],"id":"CVE-2026-40336"},{"severity":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:L"},{"type":"Ubuntu","score":"medium"}],"id":"CVE-2026-40338"},{"id":"CVE-2026-40339","severity":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:L"},{"score":"medium","type":"Ubuntu"}]},{"severity":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H"},{"type":"Ubuntu","score":"medium"}],"id":"CVE-2026-40340"},{"id":"CVE-2026-40341","severity":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:L"},{"score":"medium","type":"Ubuntu"}]}],"ecosystem":"Ubuntu:26.04:LTS"}}}],"schema_version":"1.7.5"}