5.5
Medium
CVE-2024-3209 A vulnerability was found in UPX up to 4.2.2
Description
A vulnerability was found in UPX up to 4.2.2. It has been rated as critical. This issue affects the function get_ne64 of the file bele.h. The manipulation leads to heap-based buffer overflow. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-259055. NOTE: The vendor was contacted early about this disclosure but did not respond in any way.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| upx 4.2 | 4.2.0 → 4.2.2 | No fix stated |
References
- VDB-259055 | UPX bele.h get_ne64 heap-based overflow vuldb.com
- VDB-259055 | CTI Indicators (IOB, IOC, IOA) vuldb.com
- Submit #304575 | UPX upx commit 06b0de9c77551cd4e856d453e094d8a0b6ef0d6d heap buffer overflow vuldb.com
- drive.google.com drive.google.com
- lists.fedoraproject.org lists.fedoraproject.org
- lists.fedoraproject.org lists.fedoraproject.org
- lists.fedoraproject.org lists.fedoraproject.org
Timeline
- Published
- Last modified
Other CVEs of upx
The 22 CVEs of upx →
CVE-2025-2849
A vulnerability, which was classified as problematic, was found in UPX up to 5.0.0
4.8
Medium
CVE-2021-43316
A heap-based buffer overflow was discovered in upx, during the generic pointer 'p' points to an inaccessible address…
Not rated
CVE-2021-43317
A heap-based buffer overflows was discovered in upx, during the generic pointer 'p' points to an inaccessible address in…
Not rated
CVE-2021-43314
A heap-based buffer overflows was discovered in upx, during the generic pointer 'p' points to an inaccessible address in…
Not rated