CVE-2023-40889

CVE-2023-40889 is a critical heap-based buffer overflow vulnerability in the qr_reader_match_centers function of ZBar 0.23.90, affecting the zbar_project zbar product. This flaw can be triggered by specially crafted QR codes, either digitally inputted or physically scanned, leading to potential information disclosure or arbitrary code execution. With a CVSS score of 9.8 (CRITICAL), it presents a high-severity risk due to its network-based attack vector, low attack complexity, and complete compromise potential (C:H/I:H/A:H). Currently, there is no evidence of active exploitation, public exploit code (Metasploit, Nuclei, ExploitDB), or significant community discussion or media coverage, indicating a low current exploitation profile.