Track vulnerabilities like this one. Sign up free to get alerted when software you use is affected.

CVE-2021-27799: ean_leading_zeroes in backend/upcean.c in Zint Barcode Generator 2.9.1 has a stack-based buffer overflow that is reachable from the C API through an application that includes the Zint Barcode Gener...

CVE-2021-27799 · published 5 years ago

Summary

ean_leading_zeroes in backend/upcean.c in Zint Barcode Generator 2.9.1 has a stack-based buffer overflow that is reachable from the C API through an application that includes the Zint Barcode Generator library code.

What to do

Update debian zint to version 2.9.1-1.1.

Affected software

Ecosystem	Vendor	Product	Affected versions
–	zint	barcode_generator	2.9.1 `cpe:2.3:a:zint:barcode_generator:2.9.1:::::::*`
Ubuntu:22.04:LTS	canonical	zint	All versions
Debian:12	debian	zint	< 2.9.1-1.1 Fix: upgrade to 2.9.1-1.1

Original advisory text

References

https://sourceforge.net/p/zint/tickets/218/ Third Party Advisory
https://sourceforge.net/p/zint/code/ci/7f8c8114f31c09a986597e0ba63a49f96150368a/ Third Party Advisory
http://zint.org.uk/Manual.aspx?type=p&page=3 Third Party Advisory
http://zint.org.uk/Manual.aspx?type=p&page=4 Third Party Advisory
http://zint.org.uk/Manual.aspx?type=p&page=5 Third Party Advisory
https://ubuntu.com/security/CVE-2021-27799 Third Party Advisory
https://www.cve.org/CVERecord?id=CVE-2021-27799 Third Party Advisory
https://security-tracker.debian.org/tracker/CVE-2021-27799 Vendor Advisory

Fix within

Internet-facing 14 days

Internal 60 days

Not known to be exploited
Can be exploited automatically (estimated)
Gives an attacker partial control (estimated)

Severity

7.5 High

Exploitation

2% chance of attack within 30 days

Type

CWE-787Out-of-bounds Write

Timeline

Published26 Feb 2021

Updated29 Oct 2026

First seen29 Sep 2026

Sources

CVE-2021-27799 · NVD

UBUNTU-CVE-2021-27799 · OSV

DEBIAN-CVE-2021-27799 · OSV

Track software like this

Free during beta