Threats affecting pkg:github/zbar

ZBar versions up to 0.23.95 contain an out-of-bounds read vulnerability in the _zbar_sq_decode() function. This flaw allows attackers to craft skewed SQ code images that cause the decoder to read heap memory outside the intended image buffer. The vulnerability can lead to application crashes and leakage of memory bytes into the output.