Skip to content

Product

azure linux xz vulnerabilities

2 published CVES affecting azure linux xz, from public sources (CVE.org, NVD, CISA KEV, FIRST EPSS, OSV).

Total
2
Critical
0
High
1
Medium
0
Low
1
Unscored
0
CISA KEV
0

Latest azure linux xz CVEs

Newest publication first

  1. CVE-2026-34743 XZ Utils: Buffer overflow in lzma_index_append()

    Published
    LowCVSS 1.7 EPSS 0.53%

    XZ Utils provide a general-purpose data-compression library plus command-line tools. Prior to version 5.8.3, if lzma_index_decoder() was used to decode an Index that contained no Records, the resulting lzma_index was left in a state where where a subsequent lzma_index_append() wo...

  2. CVE-2025-31115 XZ has a heap-use-after-free bug in threaded .xz decoder

    Published
    HighCVSS 8.7 EPSS 0.68%

    XZ Utils provide a general-purpose data-compression library plus command-line tools. In XZ Utils 5.3.3alpha to 5.8.0, the multithreaded .xz decoder in liblzma has a bug where invalid input can at least result in a crash. The effects include heap use after free and writing to an a...

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.