https://db.gcve.eu/rss/recent/all/10 Most recent entries from all 2026-10-18T20:05:54.621339+00:00 Vulnerability-Lookup info@gcve.eu python-feedgen Contains only the most 10 recent entries. https://db.gcve.eu/vuln/fkie_cve-2026-88371 fkie_cve-2026-88371 2026-10-18T20:05:54.666880+00:00

ZBar commit 2ea2ca58 contains an undefined-behavior vulnerability in the Code 128 decode6() function. When processing specially crafted Code 128 input, decode_e() can return -1 for an invalid edge pattern, and decode6() subsequently left-shifts this negative signed value while constructing the edge signature. The operation invokes undefined behavior and can terminate trap-mode UBSan builds with SIGILL, resulting in denial of service.

 https://db.gcve.eu/vuln/ghsa-437j-8v4m-47vv GHSA-437j-8v4m-47vv 2026-10-18T20:05:54.666956+00:00

ZBar commit 2ea2ca58 contains an undefined-behavior vulnerability in the Code 128 decode6() function. When processing specially crafted Code 128 input, decode_e() can return -1 for an invalid edge pattern, and decode6() subsequently left-shifts this negative signed value while constructing the edge signature. The operation invokes undefined behavior and can terminate trap-mode UBSan builds with SIGILL, resulting in denial of service.

 https://db.gcve.eu/vuln/opensuse-su-2026:12146-1 openSUSE-SU-2026:12146-1 — libzbar-devel-0.23.95-2.1 on GA media 2026-10-18T20:05:54.666979+00:00

libzbar-devel-0.23.95-2.1 on GA media

 https://db.gcve.eu/vuln/ubuntu-cve-2026-88371 UBUNTU-CVE-2026-88371 2026-10-18T20:05:54.667003+00:00

Affected: Ubuntu:14.04:LTS: zbar, Ubuntu:Pro:16.04:LTS: zbar, Ubuntu:Pro:18.04:LTS: zbar, Ubuntu:Pro:20.04:LTS: zbar, Ubuntu:Pro:22.04:LTS: zbar, Ubuntu:24.04:LTS: zbar, Ubuntu:26.10: zbar, Ubuntu:26.04:LTS: zbar

ZBar commit 2ea2ca58 contains an undefined-behavior vulnerability in the Code 128 decode6() function. When processing specially crafted Code 128 input, decode_e() can return -1 for an invalid edge pattern, and decode6() subsequently left-shifts this negative signed value while constructing the edge signature. The operation invokes undefined behavior and can terminate trap-mode UBSan builds with SIGILL, resulting in denial of service.