CVE-2018-25154CWE-787

GNU Barcode 0.99 Buffer Overflow in Code 93 Encoding Mechanism

High · published December 24, 2025

CVSS v4.0
8.5
EPSS
0%
Percentile
31.2
In the wild
Unconfirmed
What it is

🚨 A sneaky buffer overflow in GNU Barcode 0.99 is like a mischievous trickster taking advantage of a poorly wrapped gift! 🎁 Imagine a gift box that's too small for the present inside; if you shove it in too carelessly, the box bursts open! Similarly, this vulnerability can corrupt memory by mishandling input files, letting attackers potentially execute rogue code. If exploited, an attacker could take control of the affected system, leading to complete chaos — from stealing sensitive information to wreaking havoc on your data. The consequences could be absolutely devastating!

Put simply

Imagine a gift box that's too small for the present inside; if you shove it in too carelessly, the box bursts open! Similarly, this vulnerability can corrupt memory by mishandling input files, letting attackers potentially execute rogue code. This buffer overflow vulnerability occurs during the code 93 encoding process, where improper validation of input files allows attackers to trigger memory corruption and potentially execute arbitrary code.

What to do

If exploited, an attacker could take control of the affected system, leading to complete chaos — from stealing sensitive information to wreaking havoc on your data. The consequences could be absolutely devastating! Users are urged to update to the latest version of GNU Barcode to patch this vulnerability. Conduct a thorough audit of your systems to ensure that they are not using the affected version (0.99) and be on the lookout for any anomalies in file handling. 🔒 You've got this! By following these steps, you'll secure your systems in no time! 🦸

The record
Technical detail
CVSS v4.0
8.5 · HIGH
Vector
CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:P/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
EPSS
0.00386 · 31.2th percentile
Weakness
CWE-787 · Out-of-bounds Write
Published
2025-12-24T19:27Z
EPSS history
Timeline
  • 24 DEC 19:27Z
    GNU Barcode 0.99 Buffer Overflow in Code 93 Encoding Mechanism
    cvelistv5