TI-2025-02487 CVE-2025-2849 · GHSA-jrx7-5cr9-c5v4
UPX p_lx_elf.cpp un_DT_INIT heap-based overflow
Priority MEDIUM 55
A vulnerability, which was classified as problematic, was found in UPX up to 5.0.0.
Vulnerabilities
35 records
TI-2024-03008 CVE-2024-3209 · GHSA-97xg-px2h-jvxp
UPX bele.h get_ne64 heap-based overflow
Priority MEDIUM 45
A vulnerability was found in UPX up to 4.2.2.
TI-2021-21106 CVE-2021-46179 · GHSA-8vp9-52j5-ghqw
Reachable Assertion vulnerability in upx before 4.0.0 allows attackers to cause a denial…
Priority MEDIUM 62
Reachable Assertion vulnerability in upx before 4.0.0 allows attackers to cause a denial of service via crafted file passed to the the readx function.
TI-2021-19310 CVE-2021-43317 · GHSA-fg24-8xq8-v4pp
Memory corruption in upx
Priority HIGH 72
A heap-based buffer overflows was discovered in upx, during the generic pointer 'p' points to an inaccessible address in func get_le32().
TI-2021-19309 CVE-2021-43316 · GHSA-p7p3-32mv-p6h3
Memory corruption in upx
Priority HIGH 72
A heap-based buffer overflow was discovered in upx, during the generic pointer 'p' points to an inaccessible address in func get_le64().
TI-2021-19308 CVE-2021-43315 · GHSA-pc9f-fr4v-3pc2
Memory corruption in upx
Priority HIGH 72
A heap-based buffer overflows was discovered in upx, during the generic pointer 'p' points to an inaccessible address in func get_le32().
TI-2021-19307 CVE-2021-43314 · GHSA-qw8f-cj3r-vr8p
Memory corruption in upx
Priority HIGH 72
A heap-based buffer overflows was discovered in upx, during the generic pointer 'p' points to an inaccessible address in func get_le32().
TI-2021-19306 CVE-2021-43313 · GHSA-j554-cfvx-c858
Memory corruption in upx
Priority HIGH 72
A heap-based buffer overflow was discovered in upx, during the variable 'bucket' points to an inaccessible address.
TI-2021-19305 CVE-2021-43312 · GHSA-3rqj-h86c-2fpp
Memory corruption in upx
Priority HIGH 72
A heap-based buffer overflow was discovered in upx, during the variable 'bucket' points to an inaccessible address.
TI-2021-19304 CVE-2021-43311 · GHSA-2586-p5rg-fxqv
Memory corruption in upx
Priority HIGH 72
A heap-based buffer overflow was discovered in upx, during the generic pointer 'p' points to an inaccessible address in func get_le32().
TI-2023-09299 CVE-2023-23457 · GHSA-qcvq-w335-8gh3
Upx: segv on packlinuxelf64::invert_pt_dynamic() in p_lx_elf.cpp
Priority MEDIUM 58
A Segmentation fault was found in UPX in PackLinuxElf64::invert_pt_dynamic() in p_lx_elf.cpp.
TI-2023-09298 CVE-2023-23456 · GHSA-3j7g-922g-j6r3
Upx: heap-buffer-overflow in packtmt::pack()
Priority LOW 25
A heap-based buffer overflow issue was discovered in UPX in PackTmt::pack() in p_tmt.cpp file.
TI-2020-16884 CVE-2020-27802 · GHSA-jx23-r23x-qc23
Memory corruption in upx
Priority LOW 25
An floating point exception was discovered in the elf_lookup function in p_lx_elf.cpp in UPX 4.0.0 via a crafted Mach-O file.
TI-2020-16883 CVE-2020-27801 · GHSA-hrvc-4vxq-q985
A heap-based buffer over-read was discovered in the get_le64 function in bele.h in UPX 4.0.0 via a crafted Mach-O file.
Priority LOW 34
A heap-based buffer over-read was discovered in the get_le64 function in bele.h in UPX 4.0.0 via a crafted Mach-O file.
TI-2020-16882 CVE-2020-27800 · GHSA-2hpg-6pp8-gx2m
A heap-based buffer over-read was discovered in the get_le32 function in bele.h in UPX 4.0.0 via a crafted Mach-O file.
Priority LOW 34
A heap-based buffer over-read was discovered in the get_le32 function in bele.h in UPX 4.0.0 via a crafted Mach-O file.
TI-2020-16881 CVE-2020-27799 · GHSA-mj66-hgqf-6qqw
Memory corruption in upx
Priority LOW 34
A heap-based buffer over-read was discovered in the acc_ua_get_be32 function in miniacc.h in UPX 4.0.0 via a crafted Mach-O file.
TI-2020-16880 CVE-2020-27798 · GHSA-gqpc-4qr8-j9g3
Memory corruption in upx
Priority LOW 25
An invalid memory address reference was discovered in the adjABS function in p_lx_elf.cpp in UPX 4.0.0 via a crafted Mach-O file.
TI-2020-16879 CVE-2020-27797 · GHSA-x97v-6wf2-6ffp
Memory corruption in upx
Priority LOW 25
An invalid memory address reference was discovered in the elf_lookup function in p_lx_elf.cpp in UPX 4.0.0 via a crafted Mach-O file.
TI-2020-16878 CVE-2020-27796 · GHSA-242r-jf27-g6pp
Memory corruption in upx
Priority LOW 34
A heap-based buffer over-read was discovered in the invert_pt_dynamic function in p_lx_elf.cpp in UPX 4.0.0 via a crafted Mach-O file.
TI-2020-16872 CVE-2020-27788 · GHSA-fmj5-4m95-44jw
Out-of-bounds read in upx
Priority LOW 25
An out-of-bounds read access vulnerability was discovered in UPX in PackLinuxElf64::canPack() function of p_lx_elf.cpp file.
TI-2020-16873 CVE-2020-27790 · GHSA-vhpq-rmjq-cgrp
A floating point exception issue was discovered in UPX in…
Priority LOW 25
A floating point exception issue was discovered in UPX in PackLinuxElf64::invert_pt_dynamic() function of p_lx_elf.cpp file.
TI-2020-16871 CVE-2020-27787 · GHSA-4rhf-85wr-9pxc
Memory corruption in upx
Priority LOW 25
A Segmentaation fault was found in UPX in invert_pt_dynamic() function in p_lx_elf.cpp.
TI-2021-10897 CVE-2021-30501 · GHSA-88gh-wqj4-3fxr
Improper input validation in upx
Priority LOW 27
An assertion abort was found in upx MemBuffer::alloc() in mem.cpp, in version UPX 4.0.0.
TI-2021-10896 CVE-2021-30500 · GHSA-5339-45c2-mh5v
NULL pointer dereference in upx
Priority LOW 37
Null pointer dereference was found in upx PackLinuxElf::canUnpack() in p_lx_elf.cpp,in version UPX 4.0.0.
TI-2020-14802 CVE-2020-24119 · GHSA-68mf-gv4w-rh82
A heap buffer overflow read was discovered in upx 4.0.0, because the check in p_lx_elf.cpp is not perfect.
Priority LOW 33
A heap buffer overflow read was discovered in upx 4.0.0, because the check in p_lx_elf.cpp is not perfect.