Threats tagged 'ghsa-7rfg-j54g-6xm2'

libgphoto2 versions up to 2.5.34 contain stack-based and heap-based buffer overflow vulnerabilities in the jl2005c_init() function. These vulnerabilities allow malicious USB devices, specifically spoofed Jeilin JL2005B/C/D cameras, to supply an unbounded allocation table entry count. This can lead to memory corruption by overwriting the saved return address and heap data, potentially enabling code execution.