Known vulnerabilities in XZ Utils
Vendor:
tukaani.org
Software:
XZ Utils
Software CPE:
cpe:2.3:a:tukaani.org:xz:*:*:*:*:*:*:*:*
Website:
https://tukaani.org
Total vulnerabilities:
6
Public exploits:
1
Known exploited (KEV):
1
Highest CVSSv4 Score:
9.3
Breakdown by Severity Chart
5.8.3
5.8.2
5.8.1
5.8.0
5.7.2beta
5.7.1alpha
5.6.4
5.6.3
5.7.0alpha
5.6.2
5.4.7
5.2.13
5.6.1
5.6.0
5.5.2beta
5.5.1alpha
5.4.6
5.4.5
5.4.4
5.4.3
5.2.12
5.4.2
5.2.11
5.5.0alpha
5.4.1
5.4.0
5.3.5beta
5.2.10
5.2.9
5.3.4alpha
5.2.8
5.2.7
5.3.3alpha
5.2.6
5.3.2alpha
5.3.1alpha
5.2.2
5.2.0
5.1.4beta
5.1.3alpha
5.1.2alpha
5.1.1alpha
5.1.0alpha
5.0.8
5.0.6
5.0.4
5.0.1
5.0.0
4.999.9beta
4.999.8beta
4.999.7beta
4.999.5alpha
4.999.3alpha
4.42.2alpha
5.0.2
5.2.5
5.2.4
5.0.5
5.0.7
5.2.1
5.2.3
5.0.3
Vulnerabilities (6)
| Vulnerability | CWE-ID | CSH Severity | Public Exploit | KEV | First fixed release | Published | Bulletins |
|---|---|---|---|---|---|---|---|
| #VU139114 - Heap-based Buffer Overflow CVE-2026-34743 |
CWE-122 | Medium | 5.8.3 | 22.07.2026 |
SB2026072263 SB2026072264 SB2026072265 and 6 more |
||
| #VU106971 - Argument Injection or Modification CVE-2024-47611 |
CWE-88 | High | 5.6.3 | 03.04.2025 |
SB20250403128 SB2025050130 SB2025051942 and 1 more |
||
| #VU106970 - Heap-based Buffer Overflow CVE-2025-31115 |
CWE-122 | High | 5.8.1 | 03.04.2025 |
SB20250403127 SB20250403129 SB20250403137 and 19 more |
||
| #VU88539 - Resource exhaustion CVE-2020-22916 |
CWE-400 | Medium | 5.2.6 | 15.04.2024 |
SB2024041560 SB2024041561 SB2024041562 and 4 more |
||
| #VU87917 - Embedded Malicious Code CVE-2024-3094 |
CWE-506 | Critical | - | 01.04.2024 |
SB2024040112 SB2024040113 SB2024040114 |
||
| #VU62002 - Improper input validation CVE-2022-1271 |
CWE-20 | High | - | 08.04.2022 |
SB2022040803 SB2022040804 SB2022040822 and 134 more |