~ / search / GHSA-mhp6-jvpx-2p4m

GHSA-mhp6-jvpx-2p4m

Heap-based buffer overflow in ZBar

Source: GitHub Advisory Database (reviewed) Critical CVE-2023-40889

Packages

EcosystemPackageAffectedFixed in
PyPI zbar <= 0.23.90 no fix listed

Details

As written in the advisory (Markdown source, shown as plain text).

A heap-based buffer overflow exists in the qr_reader_match_centers function of ZBar 0.23.90. Specially crafted QR codes may lead to information disclosure and/or arbitrary code execution. To trigger this vulnerability, an attacker can digitally input the malicious QR code, or prepare it to be physically scanned by the vulnerable scanner.

References

External links from the advisory. They lead to third-party sites.