Threats Tagged 'cve-2026-34743'

A high severity buffer overflow vulnerability (CVE-2026-34743) exists in the lzma_index_append() function of the xz compression utility as used in SUSE products. This issue is addressed by a security update from the SUSE Product Security Team. The vulnerability affects specific SUSE versions and packages including liblzma5 and xz on aarch64 architectures. No known exploits are reported in the wild at this time. Patch availability is implied by the security update advisory, though explicit patch links are not provided in the input data.

A heap-based buffer overflow vulnerability exists in the tukaani-project xz utility prior to version 5. 8. 3. The issue occurs when lzma_index_decoder() processes an Index with no Records, leaving the lzma_index in a state that causes lzma_index_append() to allocate insufficient memory, leading to a buffer overflow. This vulnerability has been addressed in version 5. 8. 3. The CVSS score is low at 1. 7, indicating limited impact and exploitability.