Known vulnerabilities in XZ Utils

Software: XZ Utils
Software CPE: cpe:2.3:a:tukaani.org:xz:*:*:*:*:*:*:*:*
Total vulnerabilities: 6
Public exploits: 1
Known exploited (KEV): 1
Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting XZ Utils XZ Utils is affected by 6 known vulnerabilities: 1 critical, 3 high, 2 medium Critical High Medium Low

Vulnerabilities (6)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU139114 - Heap-based Buffer Overflow
CVE-2026-34743
CWE-122 Medium
No
No
5.8.3 22.07.2026 SB2026072263
SB2026072264
SB2026072265
and 6 more
#VU106971 - Argument Injection or Modification
CVE-2024-47611
CWE-88 High
No
No
5.6.3 03.04.2025 SB20250403128
SB2025050130
SB2025051942
and 1 more
#VU106970 - Heap-based Buffer Overflow
CVE-2025-31115
CWE-122 High
No
No
5.8.1 03.04.2025 SB20250403127
SB20250403129
SB20250403137
and 19 more
#VU88539 - Resource exhaustion
CVE-2020-22916
CWE-400 Medium
No
No
5.2.6 15.04.2024 SB2024041560
SB2024041561
SB2024041562
and 4 more
#VU87917 - Embedded Malicious Code
CVE-2024-3094
CWE-506 Critical
Available
Exploited
- 01.04.2024 SB2024040112
SB2024040113
SB2024040114
#VU62002 - Improper input validation
CVE-2022-1271
CWE-20 High
No
No
- 08.04.2022 SB2022040803
SB2022040804
SB2022040822
and 134 more