{"vulnerability": "CVE-2023-40890", "sightings": [{"uuid": "0d96c53e-3da2-4b34-9ae5-eded032339d8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-40890", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/20032", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2023-40890\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: A stack-based buffer overflow vulnerability exists in the lookup_sequence function of ZBar 0.23.90. Specially crafted QR codes may lead to information disclosure and/or arbitrary code execution. To trigger this vulnerability, an attacker can digitally input the malicious QR code, or prepare it to be physically scanned by the vulnerable scanner.\n\ud83d\udccf Published: 2023-08-29T00:00:00.000Z\n\ud83d\udccf Modified: 2025-07-01T13:48:02.663Z\n\ud83d\udd17 References:\n1. https://hackmd.io/%40cspl/H1PxPAUnn\n2. https://lists.debian.org/debian-lts-announce/2023/12/msg00001.html\n3. https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/25LZZQJGGZRPLKTRNRNOTAFQJIPS7WRP/\n4. https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/DC7V5YCLCPB36J2KY6WLZCABFLBRB665/", "creation_timestamp": "2025-07-01T14:11:19.000000Z"}, {"uuid": "ca2094ba-40ad-49f2-8d00-a28f2144cc57", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-40890", "type": "seen", "source": "https://t.me/cibsecurity/69368", "content": "\u203c CVE-2023-40890 \u203c\n\nA stack-based buffer overflow vulnerability exists in the lookup_sequence function of ZBar 0.23.90. Specially crafted QR codes may lead to information disclosure and/or arbitrary code execution. To trigger this vulnerability, an attacker can digitally input the malicious QR code, or prepare it to be physically scanned by the vulnerable scanner.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-08-29T20:17:47.000000Z"}]}