CVE-2026-34743

Name of the Vulnerable Software and Affected Versions XZ Utils versions prior to 5.8.3

Description XZ Utils, a data-compression library and command-line tools, had a flaw where the lzma index decoder() function, when processing an Index without Records, could leave the lzma index in a state leading to insufficient memory allocation during a subsequent lzma index append() call. This resulted in a buffer overflow. The issue was addressed in version 5.8.3.

Recommendations Update to version 5.8.3 or later.