Skip to content

Vendor

tukaani vulnerabilities

5 published CVES affecting tukaani, from public sources (CVE.org, NVD, CISA KEV, FIRST EPSS, OSV).

Total
5
Critical
1
High
2
Medium
1
Low
1
Unscored
0
CISA KEV
0
Atom feed of tukaani alerts

Products

Latest tukaani CVEs

Newest publication first

  1. CVE-2026-34743 XZ Utils: Buffer overflow in lzma_index_append()

    Published
    LowCVSS 1.7 EPSS 0.53%

    XZ Utils provide a general-purpose data-compression library plus command-line tools. Prior to version 5.8.3, if lzma_index_decoder() was used to decode an Index that contained no Records, the resulting lzma_index was left in a state where where a subsequent lzma_index_append() wo...

  3. CVE-2024-3094 Xz: malicious code in distributed source

    Published
    CriticalCVSS 10.0 EPSS 90.9% PoC

    Malicious code was discovered in the upstream tarballs of xz, starting with version 5.6.0. Through a series of complex obfuscations, the liblzma build process extracts a prebuilt object file from a disguised test file existing in the source code, which is then used to modify spec...

  4. CVE-2022-1271 An arbitrary file write vulnerability was found in GNU gzip's zgrep utility. When zgrep is applied on the attacker's chosen file name (for example, a crafted file name), this can overwrite an attacker...

    Published
    HighCVSS 8.8 EPSS 5.5%

    An arbitrary file write vulnerability was found in GNU gzip's zgrep utility. When zgrep is applied on the attacker's chosen file name (for example, a crafted file name), this can overwrite an attacker's content to an arbitrary attacker-selected file. This flaw occurs due to insuf...

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.