Search/CVE-2019-5998
● CVE — High

CVE-2019-5998

VendorcanonProducteos-1d c firmware, eos-1d x firmware, eos-1d x mkii firmware, eos 100d firmware, eos 5d mark iii firmware, eos 5d mark iv firmware, eos 5ds firmware, eos 5ds r firmware, eos 6d firmware, eos 700d firmware, eos 70d firmware, eos 750d firmware, eos 7d mark ii firmware, eos 800d firmware, eos 80d firmware, eos d rebel sl1 firmware, eos d rebel sl2 firmware, eos d rebel t5i firmware, eos d rebel t6i firmware, eos d rebel t7i firmware, eos kiss x7 firmware, eos kiss x7i firmware, eos kiss x8i firmware, eos kiss x9 firmware, eos kiss x9i firmwareDiscoveredAug 6, 2019UpdatedNov 21, 2024

Buffer overflow in PTP (Picture Transfer Protocol) of EOS series digital cameras (EOS-1D X firmware version 2.1.0 and earlier, EOS-1D X MKII firmware version 1.1.6 and earlier, EOS-1D C firmware version 1.4.1 and earlier, EOS 5D MARK III firmware version 1.3.5 and earlier, EOS 5D MARK IV firmware version 1.2.0 and earlier, EOS 5DS firmware version 1.1.2 and earlier, EOS 5DS R firmware version 1.1.2 and earlier, EOS 6D firmware version 1.1.8 and earlier, EOS 6D MARK II firmware version 1.0.4 and earlier, EOS 7D MARK II firmware version 1.1.2 and earlier, EOS 70 D firmware version 1.1.2 and earlier, EOS 80 D firmware version 1.0.2 and earlier, EOS KISS X7I / EOS D REBEL T5I / EOS 700D firmware version 1.1.5 and earlier, EOS KISS X8I / EOS D REBEL T6I / EOS 750D firmware version 1.0.0 and…

CVSS v3.1
8.8 HIGH
EPSS
2.56%
probability of exploitation in 30 days
CISA KEV
Not listed
no confirmed exploitation reported
News coverage
0
sources referencing this CVE
Related IOCs
0
seen in the same coverage
EPSS Trend
Aug 16, 2026 → Sep 23, 2026
● 0.00pp
2.56% → 2.56% over 9 tracked changes
CVSS v3.1 Detail
Attack VectorADJACENT
Attack ComplexityLOW
Privileges RequiredNONE
User InteractionNONE
ScopeUNCHANGED
ConfidentialityHIGH
IntegrityHIGH
AvailabilityHIGH
CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Connections
26 relationships
Timeline
disclosure → media coverage
Aug 6, 2019
Disclosure — published as a CVE record. · last revised by NVD Nov 21, 2024