CVE-2026-40335

A flaw was found in libgphoto2, a library for camera access. This out-of-bounds read vulnerability in the ptp_unpack_DPV() function occurs because the software does not properly validate buffer boundaries when handling specific data types. An attacker with physical access to the device could exploit this to potentially disclose sensitive information or cause a denial of service.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.