CVE-2020-27801

UPX 4.0.0 is affected by a heap-based buffer over-read in the get_le64 function in bele.h triggered by crafted Mach-O files. The vulnerability is consistently described across multiple feeds (NVD entry CVE-2020-27801 and various OSV/Debian/Ubuntu/Alpine trackers) without conflicting details: the ...

CVE-2020-27801

A heap-based buffer over-read was discovered in the getle64 function in bele.h in UPX 4.0.0 via a crafted Mach-O file...

CVE-2020-27801

A heap-based buffer over-read was discovered in the getle64 function in bele.h in UPX 4.0.0 via a crafted Mach-O file...

CVE-2020-27800

CVE-2020-27800 affects UPX 4.0.0, with a heap-based buffer over-read in the get_le32 function of bele.h that can be triggered by a crafted Mach-O file. Multiple connected sources (NVD/NVL, OSV entries, Debian/Ubuntu/Alpine advisories, and Nessus plugin references) confirm the same root cause and ...

CVE-2020-27800

A heap-based buffer over-read was discovered in the getle32 function in bele.h in UPX 4.0.0 via a crafted Mach-O file...

CVE-2020-27800

A heap-based buffer over-read was discovered in the getle32 function in bele.h in UPX 4.0.0 via a crafted Mach-O file...

CVE-2020-27799

CVE-2020-27799 describes a heap-based buffer over-read in UPX 4.0.0, triggered by a crafted Mach-O file. The vulnerable component is acc_ua_get_be32 in miniacc.h. The CVE’s metrics indicate a high-severity, local, user-interaction-required flaw with a base score of 7.8. The provided connected doc...

CVE-2020-27799

A heap-based buffer over-read was discovered in the accuagetbe32 function in miniacc.h in UPX 4.0.0 via a crafted Mach-O file...

CVE-2020-27798

CVE-2020-27798 affects UPX 4.0.0, where an invalid memory address reference in adjABS (p_lx_elf.cpp) can be triggered by parsing a crafted Mach-O file. The vulnerability is locally exploitable with user interaction required; impact is availability (HIGH) while confidentiality and integrity remain...

CVE-2020-27798

An invalid memory address reference was discovered in the adjABS function in plxelf.cpp in UPX 4.0.0 via a crafted Mach-O file...

CVE-2020-27798

An invalid memory address reference was discovered in the adjABS function in plxelf.cpp in UPX 4.0.0 via a crafted Mach-O file...

CVE-2020-27798

An invalid memory address reference was discovered in the adjABS function in plxelf.cpp in UPX 4.0.0 via a crafted Mach-O file...

CVE-2020-27797

UPX 4.0.0 is affected by CVE-2020-27797 due to an invalid memory address reference in the elf_lookup function (p_lx_elf.cpp) triggered by a crafted Mach-O file. The vulnerability is exploitable locally and can impact availability. The provided documents confirm the affected component and root cau...

CVE-2020-27797

An invalid memory address reference was discovered in the elflookup function in plxelf.cpp in UPX 4.0.0 via a crafted Mach-O file...

CVE-2020-27797

An invalid memory address reference was discovered in the elflookup function in plxelf.cpp in UPX 4.0.0 via a crafted Mach-O file...

CVE-2020-27797

An invalid memory address reference was discovered in the elflookup function in plxelf.cpp in UPX 4.0.0 via a crafted Mach-O file...

CVE-2020-27796

A heap-based buffer over-read was discovered in the invertptdynamic function in plxelf.cpp in UPX 4.0.0 via a crafted Mach-O file...

CVE-2020-27796

CVE-2020-27796 affects UPX 4.0.0, with a heap-based buffer over-read in the function invert_pt_dynamic within p_lx_elf.cpp , exploitable via a crafted Mach-O file. All connected sources consistently describe this as a vulnerability in UPX 4.0.0, without providing vendor patches or explicit mitiga...

CVE-2020-27796

A heap-based buffer over-read was discovered in the invertptdynamic function in plxelf.cpp in UPX 4.0.0 via a crafted Mach-O file...

CVE-2020-27796

A heap-based buffer over-read was discovered in the invertptdynamic function in plxelf.cpp in UPX 4.0.0 via a crafted Mach-O file...