Compliance Impact

The provided information does not specify any direct impact of this vulnerability on compliance with common standards and regulations such as GDPR or HIPAA.

Useful 0 Not Useful 0

Executive Summary

This vulnerability exists in libgphoto2 versions up to and including 2.5.33. It is caused by a missing null terminator in the function ptp_unpack_Canon_FE() located in camlibs/ptp2/ptp-pack.c. Specifically, the function copies a filename into a 13-byte buffer using strncpy without explicitly adding a null terminator. If the source filename is exactly 13 bytes long and lacks a null terminator, the buffer remains unterminated. This can lead to out-of-bounds reads during subsequent string operations.

Useful 0 Not Useful 0

Impact Analysis

The vulnerability can lead to out-of-bounds reads, which may cause information disclosure or application instability. According to the CVSS score (3.5), the impact includes limited confidentiality loss and some availability impact, but no integrity loss. The attack vector is physical (AV:P), requiring local access, and the vulnerability does not require user interaction.

Useful 0 Not Useful 0

Mitigation Strategies

To mitigate this vulnerability, update libgphoto2 to a version later than 2.5.33 where the issue has been patched (commit 259fc7d3bfe534ce4b114c464f55b448670ab873).

Useful 0 Not Useful 0