libgphoto2 contains a buffer over‑read in the function ptp_unpack_EOS_FocusInfoEx that can be triggered by crafted data from an untrusted USB device. The library reads beyond allocated memory (CWE‑125) and uses an invalid index into an array (CWE‑126), causing a crash. This results in a denial‑of‑service condition for any application that relies on libgphoto2, and could destabilise the host system if the crash propagates.

The vulnerability affects the open‑source libgphoto2 camera access library, versions up to and including 2.5.33. Systems that use these versions to communicate with cameras over USB and receive data from potentially untrusted peripherals are at risk.

With a CVSS score of 3.5 the technical severity is low. The EPSS score is currently < 1% and the vulnerability is not listed in CISA’s KEV catalog, so the likelihood of widespread exploitation is limited. The most likely attack vector is a local attacker who can connect a malicious USB device to a system running libgphoto2; from there the attacker can supply malformed packets to induce the over‑read and force a crash. No attacker privileges beyond local USB access are required, and the flaw does not allow remote code execution.