It was discovered that XZ Utils incorrectly handled certain memory
allocation failures when reinitializing decoders for specific compressed
file formats. An attacker could possibly use this issue to trigger an
invalid memory write, resulting in a denial of service or arbitrary code
execution.