upx records

35 published records for vendor upx.

Researcher profile

Entered KEV: 0 · 0%
Weaponized: 0 · 0%
Pre-auth RCE: 0
With a fix record: 100%
Median publish → KEV: No record has entered KEV

Records by year

Bar: total · dark part: CISA KEV.

Recurring classes

The weakness classes this vendor ships most often: where to look.

Attack profile

All records

35 records

CVE records
Action	CVE	Vulnerability	Severity	KEV	EPSS	Published
39Monitor	CVE-2024-3209No exploit	UPX bele.h get_ne64 heap-based overflowupx · upx · CWE-122 Pre-auth Memory safety	Critical9.8	—	1.2%	Apr 2, 2024
32Monitor	CVE-2018-11243No exploit	PackLinuxElf64::unpack in p_lx_elf.cpp in UPX 3.95 allows remote attackers to cause a denial of service (double free), limit the ability of upx · upx · CWE-415 Memory safety	High7.8	—	2.4%	May 18, 2018
32Monitor	CVE-2019-14296No exploit	canUnpack in p_vmlinx.cpp in UPX 3.95 allows remote attackers to cause a denial of service (SEGV or buffer overflow, and application crash) upx · upx · CWE-119 Memory safety	High7.8	—	1.8%	Jul 27, 2019
31Monitor	CVE-2021-30500No exploit	Null pointer dereference was found in upx PackLinuxElf::canUnpack() in p_lx_elf.cpp,in version UPX 4.0.0.upx · upx · CWE-476 RCE Memory safety	High7.8	—	1.2%	May 26, 2021
31Monitor	CVE-2017-16869No exploit	p_mach.cpp in UPX 3.94 allows remote attackers to cause a denial of service (invalid memory access and application crash) or possibly have uupx · upx · CWE-119 Memory safety	High7.8	—	1.0%	Nov 17, 2017
31Monitor	CVE-2017-15056No exploit	p_lx_elf.cpp in UPX 3.94 mishandles ELF headers, which allows remote attackers to cause a denial of service (application crash) or possibly upx · upx · CWE-476 Memory safety	High7.8	—	0.9%	Oct 6, 2017
31Monitor	CVE-2020-27801No exploit	A heap-based buffer over-read was discovered in the get_le64 function in bele.h in UPX 4.0.0 via a crafted Mach-O file.upx · upx · CWE-119 Memory safety	High7.8	—	0.3%	Aug 25, 2022
31Monitor	CVE-2020-27796No exploit	A heap-based buffer over-read was discovered in the invert_pt_dynamic function in p_lx_elf.cpp in UPX 4.0.0 via a crafted Mach-O file.upx · upx · CWE-119 Memory safety	High7.8	—	0.3%	Aug 25, 2022
31Monitor	CVE-2020-27800No exploit	A heap-based buffer over-read was discovered in the get_le32 function in bele.h in UPX 4.0.0 via a crafted Mach-O file.upx · upx · CWE-119 Memory safety	High7.8	—	0.3%	Aug 25, 2022
31Monitor	CVE-2020-27799No exploit	A heap-based buffer over-read was discovered in the acc_ua_get_be32 function in miniacc.h in UPX 4.0.0 via a crafted Mach-O file.upx · upx · CWE-119 Memory safety	High7.8	—	0.3%	Aug 25, 2022
30Monitor	CVE-2021-43312No exploit	A heap-based buffer overflow was discovered in upx, during the variable 'bucket' points to an inaccessible address.upx · upx · CWE-119 Pre-auth Memory safety Denial of service	High7.5	—	0.8%	Mar 24, 2023
30Monitor	CVE-2021-43317No exploit	A heap-based buffer overflows was discovered in upx, during the generic pointer 'p' points to an inaccessible address in func get_le32().upx · upx · CWE-119 Pre-auth Memory safety Denial of service	High7.5	—	0.8%	Mar 24, 2023
30Monitor	CVE-2021-43316No exploit	A heap-based buffer overflow was discovered in upx, during the generic pointer 'p' points to an inaccessible address in func get_le64().upx · upx · CWE-119 Pre-auth Memory safety Denial of service	High7.5	—	0.8%	Mar 24, 2023
30Monitor	CVE-2021-43315No exploit	A heap-based buffer overflows was discovered in upx, during the generic pointer 'p' points to an inaccessible address in func get_le32().upx · upx · CWE-119 Pre-auth Memory safety Denial of service	High7.5	—	0.8%	Mar 24, 2023
30Monitor	CVE-2021-43314No exploit	A heap-based buffer overflows was discovered in upx, during the generic pointer 'p' points to an inaccessible address in func get_le32().upx · upx · CWE-119 Pre-auth Memory safety Denial of service	High7.5	—	0.8%	Mar 24, 2023
30Monitor	CVE-2021-43313No exploit	A heap-based buffer overflow was discovered in upx, during the variable 'bucket' points to an inaccessible address.upx · upx · CWE-119 Pre-auth Memory safety Denial of service	High7.5	—	0.8%	Mar 24, 2023
30Monitor	CVE-2021-43311No exploit	A heap-based buffer overflow was discovered in upx, during the generic pointer 'p' points to an inaccessible address in func get_le32().upx · upx · CWE-119 Pre-auth Memory safety Denial of service	High7.5	—	0.8%	Mar 24, 2023
28Monitor	CVE-2020-24119No exploit	A heap buffer overflow read was discovered in upx 4.0.0, because the check in p_lx_elf.cpp is not perfect.upx · upx · CWE-125 Memory safety	High7.1	—	1.0%	May 14, 2021
26Monitor	CVE-2021-20285No exploit	A flaw was found in upx canPack in p_lx_elf.cpp in UPX 3.96.upx · upx · CWE-119 Memory safety	Medium6.6	—	0.7%	Mar 26, 2021
26Monitor	CVE-2021-46179No exploit	Reachable Assertion vulnerability in upx before 4.0.0 allows attackers to cause a denial of service via crafted file passed to the the readxupx · upx · CWE-617 Pre-auth Denial of service	Medium6.5	—	0.5%	Aug 22, 2023
22Monitor	CVE-2019-14295No exploit	An Integer overflow in the getElfSections function in p_vmlinx.cpp in UPX 3.95 allows remote attackers to cause a denial of service (crash) upx · upx · CWE-190 Memory safety Denial of service	Medium5.5	—	1.5%	Jul 27, 2019
22Monitor	CVE-2019-20053No exploit	An invalid memory address dereference was discovered in the canUnpack function in p_mach.cpp in UPX 3.95 via a crafted Mach-O file.upx · upx · CWE-119 Memory safety Denial of service	Medium5.5	—	1.2%	Dec 27, 2019
22Monitor	CVE-2019-20021No exploit	A heap-based buffer over-read was discovered in canUnpack in p_mach.cpp in UPX 3.95 via a crafted Mach-O file.upx · upx · CWE-125 Memory safety Denial of service	Medium5.5	—	1.0%	Dec 26, 2019
22Monitor	CVE-2021-30501No exploit	An assertion abort was found in upx MemBuffer::alloc() in mem.cpp, in version UPX 4.0.0.upx · upx · CWE-20 Denial of service	Medium5.5	—	1.0%	May 26, 2021
22Monitor	CVE-2019-20051No exploit	A floating-point exception was discovered in PackLinuxElf::elf_hash in p_lx_elf.cpp in UPX 3.95.upx · upx · CWE-682 Denial of service	Medium5.5	—	0.8%	Dec 27, 2019

CVE-2024-3209
39Monitor
UPX bele.h get_ne64 heap-based overflow
CriticalCVSS 9.8No exploitEPSS 1%
- Pre-auth
- Memory safety
upx · upxApr 2, 2024
CVE-2018-11243
32Monitor
PackLinuxElf64::unpack in p_lx_elf.cpp in UPX 3.95 allows remote attackers to cause a denial of service (double free), limit the ability of
HighCVSS 7.8No exploitEPSS 2%
- Memory safety
upx · upxMay 18, 2018
CVE-2019-14296
32Monitor
canUnpack in p_vmlinx.cpp in UPX 3.95 allows remote attackers to cause a denial of service (SEGV or buffer overflow, and application crash)
HighCVSS 7.8No exploitEPSS 1%
- Memory safety
upx · upxJul 27, 2019
CVE-2021-30500
31Monitor
Null pointer dereference was found in upx PackLinuxElf::canUnpack() in p_lx_elf.cpp,in version UPX 4.0.0.
HighCVSS 7.8No exploitEPSS 1%
- RCE
- Memory safety
upx · upxMay 26, 2021
CVE-2017-16869
31Monitor
p_mach.cpp in UPX 3.94 allows remote attackers to cause a denial of service (invalid memory access and application crash) or possibly have u
HighCVSS 7.8No exploitEPSS 1%
- Memory safety
upx · upxNov 17, 2017
CVE-2017-15056
31Monitor
p_lx_elf.cpp in UPX 3.94 mishandles ELF headers, which allows remote attackers to cause a denial of service (application crash) or possibly
HighCVSS 7.8No exploitEPSS 0%
- Memory safety
upx · upxOct 6, 2017
CVE-2020-27801
31Monitor
A heap-based buffer over-read was discovered in the get_le64 function in bele.h in UPX 4.0.0 via a crafted Mach-O file.
HighCVSS 7.8No exploitEPSS 0%
- Memory safety
upx · upxAug 25, 2022
CVE-2020-27796
31Monitor
A heap-based buffer over-read was discovered in the invert_pt_dynamic function in p_lx_elf.cpp in UPX 4.0.0 via a crafted Mach-O file.
HighCVSS 7.8No exploitEPSS 0%
- Memory safety
upx · upxAug 25, 2022
CVE-2020-27800
31Monitor
A heap-based buffer over-read was discovered in the get_le32 function in bele.h in UPX 4.0.0 via a crafted Mach-O file.
HighCVSS 7.8No exploitEPSS 0%
- Memory safety
upx · upxAug 25, 2022
CVE-2020-27799
31Monitor
A heap-based buffer over-read was discovered in the acc_ua_get_be32 function in miniacc.h in UPX 4.0.0 via a crafted Mach-O file.
HighCVSS 7.8No exploitEPSS 0%
- Memory safety
upx · upxAug 25, 2022
CVE-2021-43312
30Monitor
A heap-based buffer overflow was discovered in upx, during the variable 'bucket' points to an inaccessible address.
HighCVSS 7.5No exploitEPSS 0%
- Pre-auth
- Memory safety
- Denial of service
upx · upxMar 24, 2023
CVE-2021-43317
30Monitor
A heap-based buffer overflows was discovered in upx, during the generic pointer 'p' points to an inaccessible address in func get_le32().
HighCVSS 7.5No exploitEPSS 0%
- Pre-auth
- Memory safety
- Denial of service
upx · upxMar 24, 2023
CVE-2021-43316
30Monitor
A heap-based buffer overflow was discovered in upx, during the generic pointer 'p' points to an inaccessible address in func get_le64().
HighCVSS 7.5No exploitEPSS 0%
- Pre-auth
- Memory safety
- Denial of service
upx · upxMar 24, 2023
CVE-2021-43315
30Monitor
A heap-based buffer overflows was discovered in upx, during the generic pointer 'p' points to an inaccessible address in func get_le32().
HighCVSS 7.5No exploitEPSS 0%
- Pre-auth
- Memory safety
- Denial of service
upx · upxMar 24, 2023
CVE-2021-43314
30Monitor
A heap-based buffer overflows was discovered in upx, during the generic pointer 'p' points to an inaccessible address in func get_le32().
HighCVSS 7.5No exploitEPSS 0%
- Pre-auth
- Memory safety
- Denial of service
upx · upxMar 24, 2023
CVE-2021-43313
30Monitor
A heap-based buffer overflow was discovered in upx, during the variable 'bucket' points to an inaccessible address.
HighCVSS 7.5No exploitEPSS 0%
- Pre-auth
- Memory safety
- Denial of service
upx · upxMar 24, 2023
CVE-2021-43311
30Monitor
A heap-based buffer overflow was discovered in upx, during the generic pointer 'p' points to an inaccessible address in func get_le32().
HighCVSS 7.5No exploitEPSS 0%
- Pre-auth
- Memory safety
- Denial of service
upx · upxMar 24, 2023
CVE-2020-24119
28Monitor
A heap buffer overflow read was discovered in upx 4.0.0, because the check in p_lx_elf.cpp is not perfect.
HighCVSS 7.1No exploitEPSS 1%
- Memory safety
upx · upxMay 14, 2021
CVE-2021-20285
26Monitor
A flaw was found in upx canPack in p_lx_elf.cpp in UPX 3.96.
MediumCVSS 6.6No exploitEPSS 0%
- Memory safety
upx · upxMar 26, 2021
CVE-2021-46179
26Monitor
Reachable Assertion vulnerability in upx before 4.0.0 allows attackers to cause a denial of service via crafted file passed to the the readx
MediumCVSS 6.5No exploitEPSS 0%
- Pre-auth
- Denial of service
upx · upxAug 22, 2023
CVE-2019-14295
22Monitor
An Integer overflow in the getElfSections function in p_vmlinx.cpp in UPX 3.95 allows remote attackers to cause a denial of service (crash)
MediumCVSS 5.5No exploitEPSS 1%
- Memory safety
- Denial of service
upx · upxJul 27, 2019
CVE-2019-20053
22Monitor
An invalid memory address dereference was discovered in the canUnpack function in p_mach.cpp in UPX 3.95 via a crafted Mach-O file.
MediumCVSS 5.5No exploitEPSS 1%
- Memory safety
- Denial of service
upx · upxDec 27, 2019
CVE-2019-20021
22Monitor
A heap-based buffer over-read was discovered in canUnpack in p_mach.cpp in UPX 3.95 via a crafted Mach-O file.
MediumCVSS 5.5No exploitEPSS 1%
- Memory safety
- Denial of service
upx · upxDec 26, 2019
CVE-2021-30501
22Monitor
An assertion abort was found in upx MemBuffer::alloc() in mem.cpp, in version UPX 4.0.0.
MediumCVSS 5.5No exploitEPSS 1%
- Denial of service
upx · upxMay 26, 2021
CVE-2019-20051
22Monitor
A floating-point exception was discovered in PackLinuxElf::elf_hash in p_lx_elf.cpp in UPX 3.95.
MediumCVSS 5.5No exploitEPSS 0%
- Denial of service
upx · upxDec 27, 2019