Not rated
CVE-2021-20285 A flaw was found in upx canPack in p_lx_elf.cpp in UPX 3.96
Description
A flaw was found in upx canPack in p_lx_elf.cpp in UPX 3.96. This flaw allows attackers to cause a denial of service (SEGV or buffer overflow and application crash) or possibly have unspecified other impacts via a crafted ELF. The highest threat from this vulnerability is to system availability.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| upx | Versions not published |
References
- github.com github.com
- bugzilla.redhat.com bugzilla.redhat.com
Timeline
- Published
- Last modified
Other CVEs of upx
The 22 CVEs of upx →
CVE-2025-2849
A vulnerability, which was classified as problematic, was found in UPX up to 5.0.0
4.8
Medium
CVE-2024-3209
A vulnerability was found in UPX up to 4.2.2
5.5
Medium
CVE-2021-43311
A heap-based buffer overflow was discovered in upx, during the generic pointer 'p' points to an inaccessible address…
Not rated
CVE-2021-43316
A heap-based buffer overflow was discovered in upx, during the generic pointer 'p' points to an inaccessible address…
Not rated