Multiple Vulnerabilities in libgphoto2 Affect Ubuntu Users

Linuxsecurity

Multiple Vulnerabilities in libgphoto2 Affect Ubuntu Users

First seen 23 Jul 2026, 01:23 UTC • •57.8

Article Content

1 / 4

Browse articles

ThreatCluster •July 24, 2026 at 01:16 UTC

•Ubuntu's libgphoto2 has multiple vulnerabilities affecting physical access scenarios.
•CVE-2026-40333, CVE-2026-40334, and CVE-2026-40335 allow sensitive information exposure.
•A memory leak in libgphoto2 could lead to denial of service on affected systems.

On July 22, 2026, Ubuntu released USN-8586-1 addressing several vulnerabilities in libgphoto2. These include issues with buffer boundary validation and memory leaks that could allow attackers with physical access to obtain sensitive information or cause denial of service. Specifically, CVEs include CVE-2026-40333, CVE-2026-40334, CVE-2026-40335, CVE-2026-40336, and CVE-2026-40338. The vulnerabilities primarily affect Ubuntu 26.04 LTS, with potential impacts on Canon and Sony devices. Users are advised to update their systems to mitigate these risks. The vulnerabilities were published on April 17, 2026.

Start a free Starter trial for enhanced analysis

Ask AI about this cluster

Answers cite the sources they use

Updated 50d ago How this analysis works

Timeline

2026-04-17

CVE-2026-40333 published

Buffer boundary validation issue in libgphoto2 could expose sensitive information.

2026-04-17

CVE-2026-40334 published

Null-termination issue in libgphoto2 allows sensitive information exposure.

2026-04-17

CVE-2026-40335 published

Buffer boundary validation flaw in libgphoto2 could expose sensitive data.

2026-04-17

CVE-2026-40336 published

Memory leak in libgphoto2 could lead to denial of service on affected systems.

2026-04-17

CVE-2026-40339 published

Vulnerability assigned a CVE identifier and published in the National Vulnerability Database.

2026-04-17

CVE-2026-40340 published

Vulnerability assigned a CVE identifier and published in the National Vulnerability Database.

2026-04-17

CVE-2026-40341 published

Vulnerability assigned a CVE identifier and published in the National Vulnerability Database.

2026-04-17

CVE-2026-40338 published

Vulnerability assigned a CVE identifier and published in the National Vulnerability Database.

2026-07-22

USN-8586-1 released

Ubuntu published a security notice addressing multiple vulnerabilities in libgphoto2.

More articles in this cluster (3)

Following this threat?

Track CVE-2024-54661 in your own feed — you're alerted when they show up in new reporting, leak sites or exploitation.

Free account · no card needed

Continue Reading

Critical Cisco FMC Vulnerabilities Under Active Exploitation Cisco's Secure Firewall Management Center (FMC) Software has two critical vulnerabilities, CVE-2026-20079 and CVE-2026-20316, that are currently being exploited by state-sponsored and ransomware actors. CVE-2026-20079, rated 10.0 on the CVSS scale, allows unauthenticated remote attackers to bypass authentication and…

Critical GitLab Vulnerabilities Exploited Within Hours of Disclosure On September 10, 2026, GitLab released patches for critical vulnerabilities CVE-2026-85706 and CVE-2026-87719. CVE-2026-85706, a path traversal flaw, allows unauthenticated users to read arbitrary files from GitLab servers, while CVE-2026-87719 enables credential theft via insecure deserialization. Both…