libgphoto2 before version 2.5.34 contains stack‑based and heap‑based buffer overflows in the function jl2005c_init(). By supplying an unbounded allocation table entry count, a malicious USB device that mimics a Jeilin JL2005B/C/D camera and reports 1022 or more entries can overwrite the saved return address and heap data, potentially allowing the attacker to execute arbitrary code.

The vulnerability affects the libgphoto2 library, version 2.5.34 and earlier. Systems that use this version of the library to interface with USB cameras are susceptible.

The CVSS score of 7 indicates a high severity. EPSS is not reported, and the issue is not listed in the CISA KEV catalog, so the likelihood of public exploitation is currently unknown. The likely attack vector is an attacker connecting a crafted USB device to a vulnerable host, making the exploitation targetable at the point of USB connection.