CVE-2021-27799

Name of the Vulnerable Software and Affected Versions: Zint Barcode Generator version 2.9.1 Zint Barcode Generator version 2.19.1

Description: The issue is related to a stack-based buffer overflow in the ean leading zeroes function in backend/upcean.c of the Zint Barcode Generator. This overflow is reachable from the C API through an application that includes the Zint Barcode Generator library code.

Recommendations: For Zint Barcode Generator version 2.9.1, consider disabling the ean leading zeroes function in backend/upcean.c to prevent exploitation until a patch is available. For Zint Barcode Generator version 2.19.1, consider disabling the ean leading zeroes function in backend/upcean.c to prevent exploitation until a patch is available. At the moment, there is no information about a newer version that contains a fix for this vulnerability.