Two vulnerabilities in libgphoto2 involve improper memory management when initializing certain cameras and processing certain thumbnails. An attacker could exploit these by tricking a user into connecting a malicious USB device, potentially causing libgphoto2 to crash (denial of service), execute arbitrary code, or expose sensitive information. Fixed versions addressing these issues have been released.