Approved changes feed: RSS · Atom

cpe:2.3:a:zbar_project:zbar:0.23.90:*:*:*:*:*:*:*

part: a version: 0.23.90 update: *

VendorZbar Project (98e6f2c3-374a-52b6-8d65-d103d4aa0cd2)
ProductZbar (7cec98ca-ef6f-5592-8efe-9b6600d34791)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*

Notes

Imported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2023-40890 vulnerable 2026-06-08 06:11:04.701785 Details available
A stack-based buffer overflow vulnerability exists in the lookup_sequence function of ZBar 0.23.90. Specially crafted QR codes may lead to information disclosure and/or arbitrary code execution. To trigger this vulnerability, an attacker can digitally input the malicious QR code, or prepare it to be physically scanned by the vulnerable scanner.
Published: 2023-08-29T00:00:00.000Z
Updated: 2025-11-04T18:16:44.621Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-40889 vulnerable 2026-06-08 06:11:04.701273 Details available
A heap-based buffer overflow exists in the qr_reader_match_centers function of ZBar 0.23.90. Specially crafted QR codes may lead to information disclosure and/or arbitrary code execution. To trigger this vulnerability, an attacker can digitally input the malicious QR code, or prepare it to be physically scanned by the vulnerable scanner.
Published: 2023-08-29T00:00:00.000Z
Updated: 2025-11-04T18:16:43.280Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.

Inspect record JSON

Open JSON directly

Open this panel to browse, search, copy or download the JSON record.