Audit Linux privileges now to limit compromise, escalation, and system-wide damage. Review Linux Privileges×

Alerts This Week
Warning Icon 1 515
Alerts This Week
Warning Icon 1 515

Ubuntu libgphoto2 Important Buffer Abuse Denial of Service Vuln 8586-1

ubuntu
Calendar Grey July 22, 2026
Scroller Ubuntu
Several security issues in libgphoto2 could lead to information disclosure and denial of service. Update your Ubuntu now.
Several security issues were fixed in libgphoto2.

Summary

Several security issues were fixed in libgphoto2.

Software Description:

- libgphoto2: gphoto2 digital camera library

Details:

It was discovered that libgphoto2 did not properly validate buffer

boundaries when parsing EOS image format data. An attacker with physical

access could possibly use this issue to obtain sensitive information.

(CVE-2026-40333)

It was discovered that libgphoto2 did not properly null-terminate buffers

when parsing Canon folder entries. An attacker with physical access could

possibly use this issue to obtain sensitive information. (CVE-2026-40334)

It was discovered that libgphoto2 did not properly validate buffer

boundaries when parsing device property values. An attacker with physical

access could possibly use this issue to obtain sensitive information.

(CVE-2026-40335)

It was discovered that libgphoto2 had a memory leak when parsing Sony

device property descriptors. An attacker with physical access could

possibly use this issue to cause a denial of serv...

Read the Full Advisory

Topics%20covered

Topics Covered

security advisory denial of service critical Ubuntu information disclosure libgphoto2

Update Instructions

The problem can be corrected by updating your system to the following
package versions:

Ubuntu 26.04 LTS
  libgphoto2-6t64                 2.5.33-1ubuntu1.1

Ubuntu 24.04 LTS
  libgphoto2-6t64                 2.5.31-2.1ubuntu1.1

Ubuntu 22.04 LTS
  libgphoto2-6                    2.5.27-1ubuntu0.1

In general, a standard system update will make all the necessary changes.

References

https://ubuntu.com/security/notices/USN-8586-1

CVE-2026-40333, CVE-2026-40334, CVE-2026-40335, CVE-2026-40336,

CVE-2026-40338, CVE-2026-40339, CVE-2026-40340, CVE-2026-40341

Severity
critical
Lowest
Low
Medium
High
Critical

Ubuntu Security Notice USN-8586-1

Topics%20covered

Topics Covered

security advisory denial of service critical Ubuntu information disclosure libgphoto2

Package Information

https://launchpad.net/ubuntu/+source/libgphoto2/2.5.33-1ubuntu1.1
https://launchpad.net/ubuntu/+source/libgphoto2/2.5.31-2.1ubuntu1.1
https://launchpad.net/ubuntu/+source/libgphoto2/2.5.27-1ubuntu0.1

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.