dlbeer CVE debriefs

These pages are published after PatchSiren validates generated defensive summaries against stored public CVE and source evidence.

MEDIUM dlbeer CVE published 2026-10-14

CVE-2026-110596

CVE-2026-110596 is a Denial of Service vulnerability in quirc through 1.2, caused by an excessive-iteration vulnerability in find_alignment_pattern() in lib/identify.c. This allows attackers to hang quirc_end() with a crafted image, potentially leading to CPU exhaustion in applications decoding attacker-supplied QR images. The vulnerability can be triggered by arranging three finder patterns producing a n [truncated]