CVE-2021-27799

HIGH 7.5CVE-2021-27799 · Published 26/02/2021 · updated 17/06/2026

In short

CVE-2021-27799 is a HIGH (CVSS 7.5) vulnerability affecting barcode generator (zint).
Chance of exploitation in the next 30 days (EPSS): 2.4%, higher than 83.9% of all vulnerabilities.
No patched version is listed yet: follow the vendor's advisory in References.

Package	Affected versions	Patched versions
barcode generator zint	`= 2.9.1`	No fix yet

Description

ean_leading_zeroes in backend/upcean.c in Zint Barcode Generator 2.9.1 has a stack-based buffer overflow that is reachable from the C API through an application that includes the Zint Barcode Generator library code.

References

zint.org.uk/Manual.aspx · Vendor Advisory
zint.org.uk/Manual.aspx · Vendor Advisory
zint.org.uk/Manual.aspx · Vendor Advisory
sourceforge.net/p/zint/code/ci/7f8c8114f31c09a986597e0ba63a49f96150368a · Patch
sourceforge.net/p/zint/tickets/218 · Exploit

More vulnerabilities in barcode generator

See all →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free