xz vulnerabilities

1 known vulnerability in xz from Tukaani-project. 1 is rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 8.7 High severity

  xz: Race Condition within a Thread

  CVE-2025-31115Apr 3, 2025Tukaani-project

  XZ Utils provide a general-purpose data-compression library plus command-line tools. In XZ Utils 5.3.3alpha to 5.8.0, the multithreaded .xz decoder in liblzma has a bug where invalid input can at least result in a crash. The effects include heap use after free