Vulnerability in XZ Utils Discussed

The post discusses the vulnerability CVE-2025-31115 affecting versions 5.3.3alpha to 5.8.0 of XZ Utils. This vulnerability, rated 8.7 according to CVSSv4, is a "heap use-after-free" bug in the multithreaded decoder, which can cause crashes or memory corruption. It also has the potential to execute arbitrary code.