{"id":"CVE-2026-121942","published":"2026-11-04T13:17:28.740","lastModified":"2026-11-04T19:17:34.460","description":"ZBar through 0.23.95 contains an out-of-bounds read vulnerability in _zbar_sq_decode() in zbar/sqcode.c that allows attackers to read heap memory outside the image buffer via crafted SQ code images. Attackers can supply an image with a skewed SQ code finder pattern near the edge, producing unchecked sample coordinates that crash the decoder and leak bytes into output.","cvssScore":6.1,"cvssSeverity":"MEDIUM","cvssVector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:H","cwes":["CWE-125"],"vendors":[],"products":[],"references":[{"url":"https://github.com/mchehab/zbar/blob/0.23.95/zbar/sqcode.c#L529-L567","tags":[]},{"url":"https://github.com/mchehab/zbar/issues/351","tags":[]},{"url":"https://hackmd.io/@haindpwn/zbar-sqcode-sampling-oob-read","tags":[]},{"url":"https://www.vulncheck.com/advisories/zbar-through-0.23.95-out-of-bounds-read-via-zbar-sq-decode-in-sqcode-c","tags":[]},{"url":"https://hackmd.io/@haindpwn/cve-2026-121942-zbar-sqcode-sampling-oob-read","tags":[]}],"exploitRefs":[{"url":"https://github.com/mchehab/zbar/blob/0.23.95/zbar/sqcode.c#L529-L567","tags":[]},{"url":"https://github.com/mchehab/zbar/issues/351","tags":[]}],"hasPoc":true,"ai":null}