CVE-2026-121942

The ZBar library (versions through 0.23.95 ) is vulnerable to an out-of-bounds read in the _zbar_sq_decode() function located in zbar/sqcode.c. An attacker can exploit this by providing a crafted SQ code image with a skewed finder pattern near the edge. This causes the decoder to produce unchecke...