470 matches found
CVE-2020-27797
An invalid memory address reference was discovered in the elflookup function in plxelf.cpp in UPX 4.0.0 via a crafted Mach-O file...
Heap overflow
A heap-based buffer over-read was discovered in the accuagetbe32 function in miniacc.h in UPX 4.0.0 via a crafted Mach-O file...
CVE-2020-27802
An floating point exception was discovered in the elflookup function in plxelf.cpp in UPX 4.0.0 via a crafted Mach-O file...
Heap overflow
A heap-based buffer over-read was discovered in the invertptdynamic function in plxelf.cpp in UPX 4.0.0 via a crafted Mach-O file...
CVE-2020-27801
A heap-based buffer over-read was discovered in the getle64 function in bele.h in UPX 4.0.0 via a crafted Mach-O file...
Design/Logic Flaw
An invalid memory address reference was discovered in the elflookup function in plxelf.cpp in UPX 4.0.0 via a crafted Mach-O file...
UBUNTU-CVE-2020-27798
An invalid memory address reference was discovered in the adjABS function in plxelf.cpp in UPX 4.0.0 via a crafted Mach-O file...
UBUNTU-CVE-2020-27800
A heap-based buffer over-read was discovered in the getle32 function in bele.h in UPX 4.0.0 via a crafted Mach-O file...
CVE-2020-27802
An floating point exception was discovered in the elflookup function in plxelf.cpp in UPX 4.0.0 via a crafted Mach-O file...
CVE-2020-27802
CVE-2020-27802 affects UPX 4.0.0 and is triggered by processing a crafted Mach-O file, causing a floating point exception in the elf_lookup function (p_lx_elf.cpp). The connected sources confirm the vulnerable component and the root cause (unhandled input in elf_lookup for Mach-O files). No expli...
CVE-2020-27802
An floating point exception was discovered in the elflookup function in plxelf.cpp in UPX 4.0.0 via a crafted Mach-O file...
CVE-2020-27802
An floating point exception was discovered in the elflookup function in plxelf.cpp in UPX 4.0.0 via a crafted Mach-O file...
CVE-2020-27801
A heap-based buffer over-read was discovered in the getle64 function in bele.h in UPX 4.0.0 via a crafted Mach-O file...
CVE-2020-27801
UPX 4.0.0 is affected by a heap-based buffer over-read in the get_le64 function in bele.h triggered by crafted Mach-O files. The vulnerability is consistently described across multiple feeds (NVD entry CVE-2020-27801 and various OSV/Debian/Ubuntu/Alpine trackers) without conflicting details: the ...
CVE-2020-27801
A heap-based buffer over-read was discovered in the getle64 function in bele.h in UPX 4.0.0 via a crafted Mach-O file...
CVE-2020-27801
A heap-based buffer over-read was discovered in the getle64 function in bele.h in UPX 4.0.0 via a crafted Mach-O file...
CVE-2020-27800
A heap-based buffer over-read was discovered in the getle32 function in bele.h in UPX 4.0.0 via a crafted Mach-O file...
CVE-2020-27800
A heap-based buffer over-read was discovered in the getle32 function in bele.h in UPX 4.0.0 via a crafted Mach-O file...
CVE-2020-27800
CVE-2020-27800 affects UPX 4.0.0, with a heap-based buffer over-read in the get_le32 function of bele.h that can be triggered by a crafted Mach-O file. Multiple connected sources (NVD/NVL, OSV entries, Debian/Ubuntu/Alpine advisories, and Nessus plugin references) confirm the same root cause and ...