CVE-2026-121942: ZBar through 0.23.95 Out-of-Bounds Read via _zbar_sq_decode() in sqcode.c
ZBar through 0.23.95 contains an out-of-bounds read vulnerability in zbarsqdecode() in zbar/sqcode.c that allows attackers to read heap memory outside the image buffer via crafted SQ code images. Attackers can supply an image with a skewed SQ code finder pattern near the edge, producing unchecked sample coordinates that crash the decoder and leak bytes into output.
Event History
Frequently Asked Questions
Who is exposed to this issue?
Applications that use affected ZBar versions to decode attacker-controlled SQ code images are exposed. Exploitation requires an attacker to get a crafted image processed by the decoder.
Does exploitation require prior access or user interaction?
The vector is local and no privileges are required. User interaction is required, consistent with a user opening or otherwise causing processing of a crafted SQ code image.
What is the likely impact?
A crafted skewed SQ code finder pattern near an image edge can cause unchecked sample coordinates, resulting in an out-of-bounds heap read. This can crash the decoder and may leak heap bytes into decoder output.
How can teams determine whether they are affected?
Check whether the application includes ZBar through version 0.23.95 and processes SQ code images. Review image-decoding paths that accept images from untrusted or user-controlled sources.