Tukaani-project vulnerabilities
We track 1 vulnerability in Tukaani-project products. 1 is rated high or critical, and none are known to be exploited. The most recent was published on April 3, 2025.
1vulnerabilities
0critical
1high
0exploited
8.7average CVSS score
Latest Tukaani-project vulnerabilities
- 8.7 High severity
xz: Race Condition within a Thread
XZ Utils provide a general-purpose data-compression library plus command-line tools. In XZ Utils 5.3.3alpha to 5.8.0, the multithreaded .xz decoder in liblzma has a bug where invalid input can at least result in a crash. The effects include heap use after free