libgphoto2 versions up to 2.5.34 contain a heap out‑of‑bounds read/write flaw in the jl2005bcd_decompress function. A malicious USB camera can send a thumbnail with a carefully crafted allocation‑table and header byte, so the in‑place byte‑swapping logic writes beyond the allocated buffer by roughly 30 KB. This corruption can leak heap contents into preview images, potentially exposing sensitive information and leading to application crashes. The overall impact is moderate, reflected in a CVSS score of 5.2.

The affected product is gPhoto’s libgphoto2 library, any release through version 2.5.34. Systems that use libgphoto2 for camera interaction, such as digital imaging workflows or embedded camera control, are vulnerable unless they have upgraded to a newer, unpatched version.

The vulnerability’s CVSS score of 5.2 indicates moderate severity. EPSS data is not currently available, and the flaw is not listed in the CISA KEV catalog. Based on the description, the likely attack vector involves a malicious USB camera connected to a device running libgphoto2; an attacker must supply the camera and crafted thumbnail data, so exploitation requires local physical access to the camera interface. The impact includes heap corruption that could lead to information disclosure or denial of service, though remote code execution is not directly supported by the current description.