https://db.gcve.eu Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sun, 18 Oct 2026 06:24:26 +0000 https://db.gcve.eu/vuln/fkie_cve-2026-88371 <p>ZBar commit 2ea2ca58 contains an undefined-behavior vulnerability in the Code 128 decode6() function. When processing specially crafted Code 128 input, decode_e() can return -1 for an invalid edge pattern, and decode6() subsequently left-shifts this negative signed value while constructing the edge signature. The operation invokes undefined behavior and can terminate trap-mode UBSan builds with SIGILL, resulting in denial of service.</p> <p>ZBar commit 2ea2ca58 contains an undefined-behavior vulnerability in the Code 128 decode6() function. When processing specially crafted Code 128 input, decode_e() can return -1 for an invalid edge pattern, and decode6() subsequently left-shifts this negative signed value while constructing the edge signature. The operation invokes undefined behavior and can terminate trap-mode UBSan builds with SIGILL, resulting in denial of service.</p> https://db.gcve.eu/vuln/fkie_cve-2026-88371 https://db.gcve.eu/vuln/ghsa-437j-8v4m-47vv <p>ZBar commit 2ea2ca58 contains an undefined-behavior vulnerability in the Code 128 decode6() function. When processing specially crafted Code 128 input, decode_e() can return -1 for an invalid edge pattern, and decode6() subsequently left-shifts this negative signed value while constructing the edge signature. The operation invokes undefined behavior and can terminate trap-mode UBSan builds with SIGILL, resulting in denial of service.</p> <p>ZBar commit 2ea2ca58 contains an undefined-behavior vulnerability in the Code 128 decode6() function. When processing specially crafted Code 128 input, decode_e() can return -1 for an invalid edge pattern, and decode6() subsequently left-shifts this negative signed value while constructing the edge signature. The operation invokes undefined behavior and can terminate trap-mode UBSan builds with SIGILL, resulting in denial of service.</p> https://db.gcve.eu/vuln/ghsa-437j-8v4m-47vv https://db.gcve.eu/vuln/opensuse-su-2026:12146-1 <p>libzbar-devel-0.23.95-2.1 on GA media</p> <p>libzbar-devel-0.23.95-2.1 on GA media</p> https://db.gcve.eu/vuln/opensuse-su-2026:12146-1 https://db.gcve.eu/vuln/ubuntu-cve-2026-88371 <p><strong>Affected:</strong> Ubuntu:14.04:LTS: zbar, Ubuntu:Pro:16.04:LTS: zbar, Ubuntu:Pro:18.04:LTS: zbar, Ubuntu:Pro:20.04:LTS: zbar, Ubuntu:Pro:22.04:LTS: zbar, Ubuntu:24.04:LTS: zbar, Ubuntu:26.10: zbar, Ubuntu:26.04:LTS: zbar</p> <p>ZBar commit 2ea2ca58 contains an undefined-behavior vulnerability in the Code 128 decode6() function. When processing specially crafted Code 128 input, decode_e() can return -1 for an invalid edge pattern, and decode6() subsequently left-shifts this negative signed value while constructing the edge signature. The operation invokes undefined behavior and can terminate trap-mode UBSan builds with SIGILL, resulting in denial of service.</p> <p><strong>Affected:</strong> Ubuntu:14.04:LTS: zbar, Ubuntu:Pro:16.04:LTS: zbar, Ubuntu:Pro:18.04:LTS: zbar, Ubuntu:Pro:20.04:LTS: zbar, Ubuntu:Pro:22.04:LTS: zbar, Ubuntu:24.04:LTS: zbar, Ubuntu:26.10: zbar, Ubuntu:26.04:LTS: zbar</p> <p>ZBar commit 2ea2ca58 contains an undefined-behavior vulnerability in the Code 128 decode6() function. When processing specially crafted Code 128 input, decode_e() can return -1 for an invalid edge pattern, and decode6() subsequently left-shifts this negative signed value while constructing the edge signature. The operation invokes undefined behavior and can terminate trap-mode UBSan builds with SIGILL, resulting in denial of service.</p> https://db.gcve.eu/vuln/ubuntu-cve-2026-88371