CVE-2020-9385

A NULL Pointer Dereference exists in libzint in Zint 2.7.1 because multiple + characters are mishandled in add_on in upcean.c, when called from eanx in upcean.c during EAN barcode generation.

• CWE-476

• https://sourceforge.net/p/zint/tickets/181/Exploit, Issue Tracking, Third Party Advisory
• https://sourceforge.net/p/zint/tickets/181/Exploit, Issue Tracking, Third Party Advisory

Published

Feb 25, 2020

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2020-9379The Software Development Kit of the MiContact Center Busines…6.5
• CVE-2020-9380IPTV Smarters WEB TV PLAYER through 2020-02-22 allows attack…9.8
• CVE-2020-9381controllers/admin.js in Total.js CMS 13 allows remote attack…7.5
• CVE-2020-9382An issue was discovered in the Widgets extension through 1.4…5.4
• CVE-2020-9383An issue was discovered in the Linux kernel 3.16 through 5.5…7.1
• CVE-2020-9384An Insecure Direct Object Reference (IDOR) vulnerability in …8.8
• CVE-2020-9386In Mahara 18.10 before 18.10.5, 19.04 before 19.04.4, and 19…4.3
• CVE-2020-9387In Mahara 19.04 before 19.04.5 and 19.10 before 19.10.3, acc…4.3
• CVE-2020-9388CSRF protection was not present in SquaredUp before version …6.5
• CVE-2020-9389A username enumeration issue was discovered in SquaredUp bef…3.7
• CVE-2020-9390SquaredUp allowed Stored XSS before version 4.6.0. A user wa…5.4
• CVE-2020-9391An issue was discovered in the Linux kernel 5.4 and 5.5 thro…5.5