CVE-2021-43317 | BDVDB-2026-198076 Detail

upx

Description#

A heap-based buffer overflows was discovered in upx, during the generic pointer 'p' points to an inaccessible address in func get_le32(). The problem is essentially caused in PackLinuxElf64::elf_lookup() at p_lx_elf.cpp:5404

Impact#

No impact statement in the source data.

Weaknesses#

CWE-119 Improper Restriction of Operations within the Bounds of a Memory Buffer

References#

https://github.com/upx/upx/issues/380

Exploit#

No public exploit known

History#

Version 12023-03-24Record published in the CVE List.
Version 22025-02-25Most recent update recorded in the CVE List.