PT-2026-41577
Published
2026-05-07
·
Updated
2026-05-07
Description by
CVSS 3.1
5.3
MediumMetricsAV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L
XZ Utils provide a general-purpose data-compression library plus command-line tools. Prior to version 5.8.3, if
lzma index decoder() was used to decode an Index that contained no Records, the resulting lzma index was left in a state where where a subsequent lzma index append() would allocate too little memory, and a buffer overflow would occur. This issue has been patched in version 5.8.3.Exploitability
Fix
Vendors
Affected products
Related identifiers
Found an issue in the description? Have something to add? Feel free to write us 👾