CVE-2018-25154
GNU Barcode 0.99 Buffer Overflow in Code 93 Encoding Mechanism
- State
- Published
- Severity
- 8.5 High
- Published
- Dec 24, 2025
- Updated
- Apr 7, 2026
- Reserved
- Dec 24, 2025
Description
GNU Barcode 0.99 contains a buffer overflow vulnerability in its code 93 encoding process that allows attackers to trigger memory corruption. Attackers can exploit boundary errors during input file processing to potentially execute arbitrary code on the affected system.
Scores
| CVSS | Score | Vector | Source |
|---|---|---|---|
| 4.0 | 8.5 High | CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:P/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N | VulnCheck |
| 3.1 | 9.8 Critical | CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H | VulnCheck |
Weaknesses
- CWE-787 Out-of-bounds Write
Affected Products
| Product | Versions |
|---|---|
GNU BarcodeThe GNU Project | Free Software Foundation, Inc. |
|
References
- ExploitDB-44797exploit
- GNU Barcode Official Product Pageproduct
- FSF Directory Entry for Barcodeproduct
Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.