VDB

GO-2025-3922

GO-2025-3922 PUBLISHED

Memory leaks when decoding a corrupted multiple LZMA archives in github.com/ulikunitz/xz

Affected Products

VendorProductVersions
github.comulikunitz/xz0, 0

Timeline

  • Sep 17, 2025 CVE Published
  • Feb 4, 2026 CVE Updated

References

Open in Interactive Console →
$ Console Community · 100/wk Open console ›