Threats affecting pkg:rpm/redhat/xz

1 threat

Severity	CVSS	Signals	Threat	Source	Published	Score and star
High	8.7	EPSS 0.7%	CVE-2025-31115SUSE xz · security update for xz High8.7EPSS 0.7%2025-05-13GCVE DatabaseCVE-2025-31115 A heap-use-after-free vulnerability (CVE-2025-31115) exists in the threaded .xz decoder component of XZ Utils, a file compression utility used in Red Hat Enterprise Linux 10. This flaw could lead to memory corruption during decompression. Red Hat has issued an important security update addressing this issue for multiple architectures and variants of RHEL 10. A patch is available and should be applied to affected systems. EPSS 0.7%Report on CVE-2025-31115 Vulnerability SUSE Product Security Team CWE-823	GCVE Database	2025-05-13

Page 1 of 1