upx:test_packed_file_fuzzer: Crash in PackLinuxElf32::adjABS

Project: https://github.com/upx/upx.git Detailed Report: https://oss-fuzz.com/testcase?key=5866017448329216 Project: upx Fuzzing Engine: libFuzzer Fuzz Target: testpackedfilefuzzer Job Type: libfuzzerasanupx Platform Id: linux Crash Type: UNKNOWN READ Crash Address: 0x0000000094ff Crash State:...

upx:list_packed_file_fuzzer: Heap-buffer-overflow in N_BELE_RTP::BEPolicy::get32

Project: https://github.com/upx/upx.git Detailed Report: https://oss-fuzz.com/testcase?key=4528496344891392 Project: upx Fuzzing Engine: afl Fuzz Target: listpackedfilefuzzer Job Type: aflasanupx Platform Id: linux Crash Type: Heap-buffer-overflow READ 4 Crash Address: 0x62b0000144c8 Crash State:...

SUSE CVE-2021-43313

A heap-based buffer overflow was discovered in upx, during the variable 'bucket' points to an inaccessible address. The issue is being triggered in the function PackLinuxElf32::invertptdynamic at plxelf.cpp:1688...