GNU Barcode Memory Leak Vulnerability Allowing Denial-of-Service

A memory leak vulnerability has been identified in GNU Barcode version 0.99, specifically within the command line processing function in cmdline.c. This vulnerability allows attackers to exploit unfreed memory allocations by providing specially crafted input, potentially leading to denial-of-service conditions.

Impact

Exploitation of this vulnerability causes a memory leak, with AddressSanitizer reports indicating 567 bytes leaked in two allocations.

Reproduction

The vulnerability can be reproduced by using GNU Barcode 0.99 and providing a specific command line input that is crafted to exploit the memory management flaw. This input should be designed to create unfreed memory allocations, which can be verified using a tool like AddressSanitizer.