UP
Product
Upx
35
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 1High 17Medium 17Low 0
Watch
Add Upx to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2021-20285 | 6.6 | Mar 26 | A flaw was found in upx canPack in p_lx_elf.cpp in UPX 3.96 Affected: 3.96 |
| CVE-2021-46179 | 6.5 | Aug 22 | Reachable Assertion vulnerability in upx before 4.0.0 allows attackers to cause a denial of service via crafted file passed to the the readx function Affected: before 4.0.0 |
| CVE-2025-2849 | 5.5 | Mar 27 | A vulnerability, which was classified as problematic, was found in UPX up to 5.0.0 Affected: through 5.0.0 |
| CVE-2023-23457 | 5.5 | Jan 12 | A Segmentation fault was found in UPX in PackLinuxElf64::invert_pt_dynamic() in p_lx_elf.cpp Affected: before 2022-11-23 |
| CVE-2023-23456 | 5.5 | Jan 12 | A heap-based buffer overflow issue was discovered in UPX in PackTmt::pack() in p_tmt.cpp file Affected: before 2022-11-24 |
| CVE-2020-27802 | 5.5 | Aug 25 | An floating point exception was discovered in the elf_lookup function in p_lx_elf.cpp in UPX 4.0.0 via a crafted Mach-O file Affected: 4.0.0 |
| CVE-2020-27798 | 5.5 | Aug 25 | An invalid memory address reference was discovered in the adjABS function in p_lx_elf.cpp in UPX 4.0.0 via a crafted Mach-O file Affected: 4.0.0 |
| CVE-2020-27797 | 5.5 | Aug 25 | An invalid memory address reference was discovered in the elf_lookup function in p_lx_elf.cpp in UPX 4.0.0 via a crafted Mach-O file Affected: 4.0.0 |
| CVE-2020-27788 | 5.5 | Aug 18 | An out-of-bounds read access vulnerability was discovered in UPX in PackLinuxElf64::canPack() function of p_lx_elf.cpp file Affected: before 3.96 |
| CVE-2020-27790 | 5.5 | Aug 18 | A floating point exception issue was discovered in UPX in PackLinuxElf64::invert_pt_dynamic() function of p_lx_elf.cpp file Affected: before 3.96 |
| CVE-2020-27787 | 5.5 | Aug 18 | A Segmentaation fault was found in UPX in invert_pt_dynamic() function in p_lx_elf.cpp Affected: before 3.96 |
| CVE-2021-30501 | 5.5 | May 27 | An assertion abort was found in upx MemBuffer::alloc() in mem.cpp, in version UPX 4.0.0 Affected: 4.0.0 |
| CVE-2019-20805 | 5.5 | Jun 1 | p_lx_elf.cpp in UPX before 3.96 has an integer overflow during unpacking via crafted values in a PT_DYNAMIC segment Affected: before 3.96 |
| CVE-2019-20053 | 5.5 | Dec 27 | An invalid memory address dereference was discovered in the canUnpack function in p_mach.cpp in UPX 3.95 via a crafted Mach-O file Affected: 3.95 |
| CVE-2019-20051 | 5.5 | Dec 27 | A floating-point exception was discovered in PackLinuxElf::elf_hash in p_lx_elf.cpp in UPX 3.95 Affected: 3.95 |
| CVE-2019-20021 | 5.5 | Dec 27 | A heap-based buffer over-read was discovered in canUnpack in p_mach.cpp in UPX 3.95 via a crafted Mach-O file Affected: 3.95 |
| CVE-2019-14295 | 5.5 | Jul 27 | An Integer overflow in the getElfSections function in p_vmlinx.cpp in UPX 3.95 allows remote attackers to cause a denial of service (crash) via a skewed offset larger than the… Affected: 3.95 |
Showing 17