PT-2026-47005

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=514739401 Crash type: Heap-buffer-overflow READ 4 Crash state: N BELE RTP::BEPolicy::get32 PackLinuxElf32::elf lookup PackLinuxElf32::PackLinuxElf32help1...

upx:decompress_packed_file_fuzzer: Heap-buffer-overflow in N_BELE_RTP::BEPolicy::get32

Project: https://github.com/upx/upx.git Detailed Report: https://oss-fuzz.com/testcase?key=4675508683210752 Project: upx Fuzzing Engine: afl Fuzz Target: decompresspackedfilefuzzer Job Type: aflasanupx Platform Id: linux Crash Type: Heap-buffer-overflow READ 4 Crash Address: 0x7d0b745e1d93 Crash...

EUVD-2021-30250

Malicious code in bioql PyPI...

EUVD-2021-30253

Malicious code in bioql PyPI...

EUVD-2021-30252

Malicious code in bioql PyPI...

EUVD-2021-30254

Malicious code in bioql PyPI...

upx:list_packed_file_fuzzer: Crash in N_BELE_RTP::BEPolicy::get32

Project: https://github.com/upx/upx.git Detailed Report: https://oss-fuzz.com/testcase?key=5373865874489344 Project: upx Fuzzing Engine: libFuzzer Fuzz Target: listpackedfilefuzzer Job Type: libfuzzerubsanupx Platform Id: linux Crash Type: UNKNOWN READ Crash Address: 0x5c0cce2ad000 Crash State:...

upx:decompress_packed_file_fuzzer: Heap-buffer-overflow in PackLinuxElf32::unpack

Project: https://github.com/upx/upx.git Detailed Report: https://oss-fuzz.com/testcase?key=5398945262272512 Project: upx Fuzzing Engine: libFuzzer Fuzz Target: decompresspackedfilefuzzer Job Type: libfuzzerasanupx Platform Id: linux Crash Type: Heap-buffer-overflow READ Crash Address:...

upx:test_packed_file_fuzzer: Heap-buffer-overflow in N_BELE_RTP::BEPolicy::get32

Project: https://github.com/upx/upx.git Detailed Report: https://oss-fuzz.com/testcase?key=4717325636403200 Project: upx Fuzzing Engine: libFuzzer Fuzz Target: testpackedfilefuzzer Job Type: libfuzzerasanupx Platform Id: linux Crash Type: Heap-buffer-overflow READ 4 Crash Address: 0x52d00003ec00...

OSV-2024-98 UNKNOWN READ in PackLinuxElf32::adjABS

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=66287 Crash type: UNKNOWN READ Crash state: PackLinuxElf32::adjABS PackLinuxElf32::unasldynsym PackLinuxElf32::unshlib1...

PT-2024-40889 · Git +1 · Upx

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided description. Description: The issue is related to a crash type of UNKNOWN READ, with a crash state involving functions such as PackLinuxElf32::adjABS, PackLinuxElf32::un asl dynsy...

upx:test_packed_file_fuzzer: Crash in PackLinuxElf32::adjABS

Project: https://github.com/upx/upx.git Detailed Report: https://oss-fuzz.com/testcase?key=6754921907027968 Project: upx Fuzzing Engine: libFuzzer Fuzz Target: testpackedfilefuzzer Job Type: libfuzzerasanupx Platform Id: linux Crash Type: UNKNOWN READ Crash Address: 0x000000157f8d Crash State:...

upx:decompress_packed_file_fuzzer: Stack-buffer-overflow in PackLinuxElf32::unpack

Project: https://github.com/upx/upx.git Detailed Report: https://oss-fuzz.com/testcase?key=6229815489265664 Project: upx Fuzzing Engine: libFuzzer Fuzz Target: decompresspackedfilefuzzer Job Type: libfuzzerasanupx Platform Id: linux Crash Type: Stack-buffer-overflow READ 4 Crash Address:...

upx:test_packed_file_fuzzer: Stack-buffer-overflow in PackLinuxElf32::unpack

Project: https://github.com/upx/upx.git Detailed Report: https://oss-fuzz.com/testcase?key=4922689521254400 Project: upx Fuzzing Engine: libFuzzer Fuzz Target: testpackedfilefuzzer Job Type: libfuzzerasanupx Platform Id: linux Crash Type: Stack-buffer-overflow READ 4 Crash Address: 0x7c09dae06bf0...

upx:test_packed_file_fuzzer: Crash in PackLinuxElf32::adjABS

Project: https://github.com/upx/upx.git Detailed Report: https://oss-fuzz.com/testcase?key=5866017448329216 Project: upx Fuzzing Engine: libFuzzer Fuzz Target: testpackedfilefuzzer Job Type: libfuzzerasanupx Platform Id: linux Crash Type: UNKNOWN READ Crash Address: 0x0000000094ff Crash State:...

Heap Buffer Overflow

UPX is vulnerable to a heap-based buffer overflow. The vulnerability is due to the variable 'bucket' pointing to an inaccessible address in the function PackLinuxElf32::invertptdynamic at plxelf.cpp which can be exploited by attackers to execute arbitrary code or cause a denial of service...

upx:list_packed_file_fuzzer: Heap-buffer-overflow in N_BELE_RTP::BEPolicy::get32

Project: https://github.com/upx/upx.git Detailed Report: https://oss-fuzz.com/testcase?key=4528496344891392 Project: upx Fuzzing Engine: afl Fuzz Target: listpackedfilefuzzer Job Type: aflasanupx Platform Id: linux Crash Type: Heap-buffer-overflow READ 4 Crash Address: 0x62b0000144c8 Crash State:...

SUSE CVE-2021-43315

A heap-based buffer overflows was discovered in upx, during the generic pointer 'p' points to an inaccessible address in func getle32. The problem is essentially caused in PackLinuxElf32::elflookup at plxelf.cpp:5349...

SUSE CVE-2021-43314

A heap-based buffer overflows was discovered in upx, during the generic pointer 'p' points to an inaccessible address in func getle32. The problem is essentially caused in PackLinuxElf32::elflookup at plxelf.cpp:5368...

Heap-based Buffer Overflow

Overview Affected versions of this package are vulnerable to Heap-based Buffer Overflow due to the variable bucket pointing to an inaccessible address. The issue is being triggered in the function PackLinuxElf32::invertptdynamic at plxelf.cpp:1688. Remediation Upgrade upx to version 4.2.1 or...