CVE-2026-88371Published
ZBar commit 2ea2ca58 contains an undefined-behavior vulnerability in the Code 128 decode6() function. When processing specially crafted Code 128 input, decode_e() can return -1 for an invalid edge pattern, and decode6() subsequently left-sh…
Explicit identifiers and source references
These records connect through source-stated identifiers. Shared identifiers or dates alone do not establish shared exposure, root cause or applicability.
CVE-2026-88371 · Microsoft / collected KEV context
cve-program · CVE-2026-88371
Related operational evidence
Explicit CVE identifiersNo related operational record is retained in the current change model.