Lucene search

K

PRIOn knowledge basePRION:CVE-2023-40889

HistoryAug 29, 2023 - 5:15 p.m.

Heap overflow

2023-08-2917:15:00

PRIOn knowledge base

www.prio-n.com

heap overflow

buffer overflow

zbar

qr codes

information disclosure

arbitrary code execution

vulnerability

attacker

scanner

9.6 High

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

45.5%

A heap-based buffer overflow exists in the qr_reader_match_centers function of ZBar 0.23.90. Specially crafted QR codes may lead to information disclosure and/or arbitrary code execution. To trigger this vulnerability, an attacker can digitally input the malicious QR code, or prepare it to be physically scanned by the vulnerable scanner.

CPENameOperatorVersion
zbareq0.23.90

References

hackmd.io/%40cspl/B1ZkFZv23

lists.debian.org/debian-lts-announce/2023/12/msg00001.html

lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/25LZZQJGGZRPLKTRNRNOTAFQJIPS7WRP/

lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/DC7V5YCLCPB36J2KY6WLZCABFLBRB665/

9.6 High

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

45.5%

Related for PRION:CVE-2023-40889

osv4 alpinelinux1 cvelist1 nvd1 ubuntucve1 veracode1 cve1 github1 debiancve1 nessus5 openvas4 debian2 fedora2 amazon1