CVE-2019-5998

CVE-2019-5998 describes a buffer overflow vulnerability in the Picture Transfer Protocol (PTP) of numerous Canon EOS series digital cameras and select PowerShot models. An attacker on the same network segment can exploit this flaw by sending a malicious notifybtstatus command, leading to denial of service or arbitrary code execution on the affected device. This vulnerability is rated as high severity (CVSS 8.8), requiring adjacent network access with low attack complexity and no user interaction, potentially resulting in high impact to confidentiality, integrity, and availability. While not listed in CISA's KEV catalog, the vulnerability has garnered significant community discussion and media coverage, including demonstrations of ransomware attacks, though no public exploit code (Metasploit, Nuclei, ExploitDB) is currently available.