CVE-2020-27802

An floating point exception was discovered in the elflookup function in plxelf.cpp in UPX 4.0.0 via a crafted Mach-O file...

CVE-2020-27801

A heap-based buffer over-read was discovered in the getle64 function in bele.h in UPX 4.0.0 via a crafted Mach-O file...

CVE-2020-27797

An invalid memory address reference was discovered in the elflookup function in plxelf.cpp in UPX 4.0.0 via a crafted Mach-O file...

CVE-2020-27796

A heap-based buffer over-read was discovered in the invertptdynamic function in plxelf.cpp in UPX 4.0.0 via a crafted Mach-O file...

UPX 缓冲区错误漏洞

UPX is a portable and extensible executable compression program. A security vulnerability exists in UPX version 4.0.0, which stems from a heap-based out-of-bounds read that can be implemented by an attacker via a carefully crafted Mach-O file to the invertptdynamic function of its plxelf.cpp...

UPX 缓冲区错误漏洞

UPX is a portable and extensible executable compression program. A security vulnerability exists in UPX version 4.0.0, which stems from a heap-based out-of-bounds read that can be implemented by an attacker via a carefully crafted Mach-O file to the getle64 function of its bele.h component...

Design/Logic Flaw

An invalid memory address dereference was discovered in the canUnpack function in pmach.cpp in UPX 3.95 via a crafted Mach-O file...

CVE-2019-20053

An invalid memory address dereference was discovered in the canUnpack function in pmach.cpp in UPX 3.95 via a crafted Mach-O file...

CVE-2019-20053

An invalid memory address dereference was discovered in the canUnpack function in pmach.cpp in UPX 3.95 via a crafted Mach-O file...

CVE-2019-20021

CVE-2019-20021 affects UPX, where UPX 3.95 contains a heap-based buffer over-read in canUnpack() within p_mach.cpp when processing crafted Mach-O files. OpenSUSE/Fedora advisories indicate the fix is in UPX 3.96, which patches this vulnerability (and related CVEs) by updating to 3.96. Practical i...

CVE-2018-11380

CVE-2018-11380 affects radare2 2.5.0, where parse_import_ptr() can be triggered by a crafted Mach-O file to cause a heap-based out-of-bounds read and application crash (denial of service). The issue is tied to parsing Mach-O inputs in radare2. Affected component: parse_import_ptr() in radare2 2.5...

CVE-2018-8810

In radare2 2.4.0, there is a heap-based buffer over-read in the getivarlistt function of mach0classes.c. Remote attackers could leverage this vulnerability to cause a denial of service via a crafted Mach-O file...

CVE-2018-8810

In radare2 2.4.0, there is a heap-based buffer over-read in the getivarlistt function of mach0classes.c. Remote attackers could leverage this vulnerability to cause a denial of service via a crafted Mach-O file...

CVE-2018-8810

In radare2 2.4.0, there is a heap-based buffer over-read in the getivarlistt function of mach0classes.c. Remote attackers could leverage this vulnerability to cause a denial of service via a crafted Mach-O file...

Heap overflow

In radare2 2.4.0, there is a heap-based buffer over-read in the getivarlistt function of mach0classes.c. Remote attackers could leverage this vulnerability to cause a denial of service via a crafted Mach-O file...

CVE-2018-8810

In radare2 2.4.0, there is a heap-based buffer over-read in the getivarlistt function of mach0classes.c. Remote attackers could leverage this vulnerability to cause a denial of service via a crafted Mach-O file...

Design/Logic Flaw

DISPUTED pmach.cpp in UPX 3.94 allows remote attackers to cause a denial of service invalid memory access and application crash or possibly have unspecified other impact via a crafted Mach-O file, related to canPack and unpack functions. NOTE: the vendor has stated "there is no security implicati...

UBUNTU-CVE-2017-16869

DISPUTED pmach.cpp in UPX 3.94 allows remote attackers to cause a denial of service invalid memory access and application crash or possibly have unspecified other impact via a crafted Mach-O file, related to canPack and unpack functions. NOTE: the vendor has stated "there is no security implicati...

PT-2017-14606 · Upx +1 · Upx +1

Name of the Vulnerable Software and Affected Versions: UPX version 3.94 Description: The issue allows remote attackers to cause a denial of service, resulting in invalid memory access and application crash, or possibly have other unspecified impacts via a crafted Mach-O file. This is related to t...

CVE-2017-7136

An issue was discovered in certain Apple products. Xcode before 9 is affected. The issue involves the "ld64" component. It allows remote attackers to execute arbitrary code or cause a denial of service memory corruption and application crash via a crafted Mach-O file...