Homepage

Heap-based Buffer Overflow The advisory has been revoked - it doesn't affect any version of package gvfs-gphoto2  (opens in a new tab)

Threat Intelligence

EPSS
0.62% (50th percentile)

Do your applications use this vulnerable package?

In a few clicks we can analyze your entire application and see what components are vulnerable in your application, and suggest you quick fixes.

Test your applications
  • Snyk IDSNYK-RHEL10-GVFSGPHOTO2-19495141
  • published2 Sept 2026
  • disclosed3 Jul 2026
Report a new vulnerability Found a mistake?

Introduced: 3 Jul 2026

CVE-2026-84268  (opens in a new tab)
CWE-122  (opens in a new tab)

Amendment

The Red Hat security team deemed this advisory irrelevant for RHEL:10.

NVD Description

Note: Versions mentioned in the description apply only to the upstream gvfs-gphoto2 package and not the gvfs-gphoto2 package as distributed by RHEL.

A flaw was found in the SFTP backend in gvfs. When mounting a share and reading a file, a malicious SFTP server can cause read_reply() to process a length that exceeds the size requested by the client. The function does not verify the server-provided length against the allocated buffer size, causing the operation to write past the intended boundaries. This issue allows a malicious server to corrupt adjacent heap memory in the gvfsd-sftp process, resulting in a denial of service as the process aborts upon detecting the heap corruption or potentially allowing arbitrary code execution.