CVE-2021-27799

ean_leading_zeroes in backend/upcean.c in Zint Barcode Generator 2.9.1 has a stack-based buffer overflow that is reachable from the C API through an application that includes the Zint Barcode Generator library code.

• CWE-787

• http://zint.org.uk/Manual.aspx?type=p&page=3Vendor Advisory
• http://zint.org.uk/Manual.aspx?type=p&page=4Vendor Advisory
• http://zint.org.uk/Manual.aspx?type=p&page=5Vendor Advisory
• https://sourceforge.net/p/zint/code/ci/7f8c8114f31c09a986597e0ba63a49f96150368a/Patch, Third Party Advisory
• https://sourceforge.net/p/zint/tickets/218/Exploit, Third Party Advisory
• http://zint.org.uk/Manual.aspx?type=p&page=3Vendor Advisory
• http://zint.org.uk/Manual.aspx?type=p&page=4Vendor Advisory
• http://zint.org.uk/Manual.aspx?type=p&page=5Vendor Advisory
• https://sourceforge.net/p/zint/code/ci/7f8c8114f31c09a986597e0ba63a49f96150368a/Patch, Third Party Advisory
• https://sourceforge.net/p/zint/tickets/218/Exploit, Third Party Advisory

Published

Feb 26, 2021

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2021-27793ntermittent authorization failure in aaa tacacs+ with Brocad…5.3
• CVE-2021-27794A vulnerability in the authentication mechanism of Brocade F…7.8
• CVE-2021-27795Brocade Fabric OS (FOS) hardware platforms running any vers…8.1
• CVE-2021-27796A vulnerability in Brocade Fabric OS versions before Brocade…6.5
• CVE-2021-27797Brocade Fabric OS before Brocade Fabric OS v8.2.1c, v8.1.2h,…9.8
• CVE-2021-27798A vulnerability in Brocade Fabric OS versions 7.4.1b and 7.3…5.5
• CVE-2021-27802Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultID…
• CVE-2021-27803A vulnerability was discovered in how p2p/p2p_pd.c in wpa_su…7.5
• CVE-2021-27804JPEG XL (aka jpeg-xl) through 0.3.2 allows writable memory c…9.8
• CVE-2021-27807A carefully crafted PDF file can trigger an infinite loop wh…5.5
• CVE-2021-27811A code injection vulnerability has been discovered in the Up…7.2
• CVE-2021-27815NULL Pointer Deference in the exif command line tool, when p…5.5