Executive brief
Memory leaks when decoding a corrupted multiple LZMA archives in github.com/ulikunitz/xz
Affected products
- Go github.com/ulikunitz/xz
Junglewise Threat Intelligence
CVE-2025-58058: GO-2025-3922 - Memory leaks when decoding a corrupted multiple LZMA archives in github.com/ulikunitz/xz
CVE-2025-58058 · Severity: low · CVSS 3.1 · Published 2025-09-17
Technologies: github.com/ulikunitz/xz (Go). Vendors: Go.