GNU Barcode Buffer Overflow Vulnerability in Code 93 Encoding

A buffer overflow vulnerability has been identified in GNU Barcode version 0.99, specifically within the Code 93 encoding process. This vulnerability allows attackers to cause memory corruption by exploiting boundary errors during the processing of input files. Successful exploitation could lead to the execution of arbitrary code on the affected system.

Impact

Exploitation of this vulnerability causes a global buffer overflow, allowing for memory corruption that could be leveraged to execute arbitrary code.

Reproduction

The vulnerability can be reproduced by processing a specially crafted input file with GNU Barcode 0.99. This can be done using the command line interface, specifying the crafted file as input. The exploitation can be verified by using AddressSanitizer, which will report the buffer overflow error.