PT-2026-136962

ZBar through 0.23.95 contains an out-of-bounds read vulnerability in zbar sq decode in zbar/sqcode.c that allows attackers to read heap memory outside the image buffer via crafted SQ code images. Attackers can supply an image with a skewed SQ code finder pattern near the edge, producing unchecked...