Threats tagged 'ghsa-4cvw-qwj9-xjc2'

A heap out-of-bounds read and write vulnerability exists in libgphoto2 through version 2.5.34 in the jl2005bcd_decompress() function. This flaw allows malicious USB cameras to corrupt heap memory by processing oversized thumbnails. Specifically, attackers can manipulate allocation-table values and a thumbnail header byte to cause in-place byte-swapping to exceed the buffer by approximately 30 KB, potentially leaking heap contents in preview images.