CVE-2026-121942

ZBar through 0.23.95 contains an out-of-bounds read vulnerability in zbarsqdecode in zbar/sqcode.c that allows attackers to read heap memory outside the image buffer via crafted SQ code images. Attackers can supply an image with a skewed SQ code finder pattern near the edge, producing unchecked...