Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

msrc логотип

CVE-2026-34743

Опубликовано: 04 апр. 2026
Источник: msrc
EPSS Низкий

Описание

XZ Utils: Buffer overflow in lzma_index_append()

EPSS

Процентиль: 27%
0.00351
Низкий

Связанные уязвимости

CVSS3: 5.3
ubuntu
4 месяца назад

XZ Utils provide a general-purpose data-compression library plus command-line tools. Prior to version 5.8.3, if lzma_index_decoder() was used to decode an Index that contained no Records, the resulting lzma_index was left in a state where where a subsequent lzma_index_append() would allocate too little memory, and a buffer overflow would occur. This issue has been patched in version 5.8.3.

CVSS3: 5.3
redhat
4 месяца назад

XZ Utils provide a general-purpose data-compression library plus command-line tools. Prior to version 5.8.3, if lzma_index_decoder() was used to decode an Index that contained no Records, the resulting lzma_index was left in a state where where a subsequent lzma_index_append() would allocate too little memory, and a buffer overflow would occur. This issue has been patched in version 5.8.3.

CVSS3: 5.3
nvd
4 месяца назад

XZ Utils provide a general-purpose data-compression library plus command-line tools. Prior to version 5.8.3, if lzma_index_decoder() was used to decode an Index that contained no Records, the resulting lzma_index was left in a state where where a subsequent lzma_index_append() would allocate too little memory, and a buffer overflow would occur. This issue has been patched in version 5.8.3.

CVSS3: 5.3
debian
4 месяца назад

XZ Utils provide a general-purpose data-compression library plus comma ...

suse-cvrf
2 месяца назад

Security update for xz

EPSS

Процентиль: 27%
0.00351
Низкий