Search vulnerabilities

Results 1

Export CSV
CVE-2026-95516

zbar: zbar: heap-buffer-overflow write in Structured-Append QR text extraction

A flaw was found in the ZBar barcode reader library. A heap-buffer-overflow write of one byte occurs when processing Structured-Append QR codes where the buffer size calculation does not account for NUL separator bytes inserted between decoded segments. An attacker could exploit this by crafting a QR code image that, when scanned by an application using zbar, causes heap corruption leading to a denial of service (application crash).

CVSS 3.1 · 5.5 Medium EPSS n/a KEV · Not listed
Vendors
Products