Threats tagged 'ghsa-mcxw-xh39-2qjq'

ZBar versions through 0.23.95 have an out-of-bounds read vulnerability in the _zbar_sq_decode() function within zbar/sqcode.c. This flaw allows attackers to craft skewed SQ code images that cause the decoder to read heap memory outside the intended image buffer, potentially leaking memory contents and causing a crash.