vulnerability
XZ Utils vulnerability impacting B&R Products
Critical
Summary
This advisory details a critical vulnerability (CVE-2025-31115) affecting versions of XZ Utils used in B&R Industrial Automation products, specifically the PPC3100, C50, C80, FT50, MT50, T30, T80, and T50. The vulnerability, stemming from a bug in the multithreaded .xz decoder, allows for heap use-after-free and potential memory corruption, potentially leading to system crashes. B&R has released a patch, and CISA recommends immediate application of the fix to mitigate the risk.
Summary written automatically in our own words from the original article, which belongs to its publisher and remains the reference. It may contain errors. Sources & data