CVE-2023-40889

CVE-2023-40889 (ZBar) involves a heap-based buffer overflow in the qr_reader_match_centers function of ZBar 0.23.90. A specially crafted QR code can trigger information disclosure and potentially arbitrary code execution when scanned. Exploit vectors in public advisories align with input via inpu...

CVE-2023-40890

Summary: CVE-2023-40890 affects ZBar 0.23.90 and describes a stack-based buffer overflow in the lookup_sequence function. Attackers can trigger via specially crafted QR codes scanned by vulnerable hardware/software, with potential information disclosure and arbitrary code execution as indicated b...