Advisories · Technology

tukaani-project xz.

Every CVE that names tukaani-project xz among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.

CVE-2026-34743 CVE record

CVSS 1.7 Low

XZ Utils: Buffer overflow in lzma_index_append()
- tukaani-project xz
- Memory corruption
Not analysed yet 2 Apr 2026
CVE-2025-31115 CVE record

CVSS 8.7 High

XZ has a heap-use-after-free bug in threaded .xz decoder
- tukaani-project xz
- Memory corruption
- CWE-366
Not analysed yet 3 Apr 2025
CVE-2024-47611 CVE record

CVSS 6.3 Medium

XZ Utils on Microsoft Windows platform are vulnerable to argument injection
- tukaani-project xz
- Command injection
- CWE-176
Not analysed yet 2 Oct 2024