CVE-2023-40890: Buffer Overflow
A stack-based buffer overflow vulnerability exists in the lookupsequence function of ZBar 0.23.90. Specially crafted QR codes may lead to information disclosure and/or arbitrary code execution. To trigger this vulnerability, an attacker can digitally input the malicious QR code, or prepare it to be physically scanned by the vulnerable scanner.
Affected Software
Event History
Frequently Asked Questions
What is CVE-2023-40890?
CVE-2023-40890 is a stack-based buffer overflow vulnerability in the lookup_sequence function of ZBar 0.23.90.
How does CVE-2023-40890 impact me?
CVE-2023-40890 can lead to information disclosure and/or arbitrary code execution when processing specially crafted QR codes.
What is the severity of CVE-2023-40890?
CVE-2023-40890 has a severity rating of critical (9.8).
How do I fix CVE-2023-40890?
To fix CVE-2023-40890, it is recommended to update to the latest version of ZBar (0.23.90) provided by the ZBar project.
Where can I find more information about CVE-2023-40890?
You can find more information about CVE-2023-40890 at the following link: [https://hackmd.io/@cspl/H1PxPAUnn](https://hackmd.io/@cspl/H1PxPAUnn).