Skip to content
OpenAdvisories
High ICSA-26-181-05 1 CVE

XZ Utils vulnerability impacting B&R Products

Published Jun 10, 2026 · Updated Jun 30, 2026 · Revision 2

Vendor: B&R Industrial Automation Product: C50 Product: C80 Product: FT50 Product: MT50 Product: PPC3100 Product: T30 Product: T50 Product: T80

Summary

An update is available that resolves vulnerability in the product versions listed as affected in the advisory.

An attacker who successfully exploited this vulnerability could cause the product to stop or corrupt memory data.

Vulnerabilities 1

  • High 8.7
    CVE-2025-31115

    XZ has a heap-use-after-free bug in threaded .xz decoder

    XZ Utils provide a general-purpose data-compression library plus command-line tools. In XZ Utils 5.3.3alpha to 5.8.0, the multithreaded .xz decoder in liblzma has a bug where invalid input can at least result in a crash. The effects include heap use after fre…

    tukaani-project xz xz-utils xz Debian Ubuntu Azure Linux Alpine Hackage

Revision history

  1. #2

    Initial CISA Republication of ABB PSIRT SA26P009 advisory

  2. #1

    Initial version.

References