PatchTheCVEbarcode generator vulnerabilities and fixes
Recent CVEs affecting barcode generator, with upgrade or downgrade steps. 2 tracked.
Also searched as: barcodegenerator.
barcode generator has 2 tracked vulnerabilities, 0 critical. A fixed release or vendor patch exists for 1. Most recent: 2021-08-17. Highest priority: CVE-2021-27799 (score 57/100).
- CVE-2021-39247 MEDIUM 6.5 UPGRADE Zint Barcode Generator before 2.10.0 has a one-byte buffer over-read, related to is_last_single_ascii in code1
- CVE-2021-27799 HIGH 7.5 DOWNGRADE ean_leading_zeroes in backend/upcean.c in Zint Barcode Generator 2.9.1 has a stack-based buffer overflow that
FAQ
How do I fix barcode generator vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is barcode generator being exploited right now?
None of the tracked barcode generator CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which barcode generator CVE should I patch first?
CVE-2021-27799 currently ranks highest (57/100): ean_leading_zeroes in backend/upcean.c in Zint Barcode Generator 2.9.1 has a stack-based buffer overflow that .