ANT-2026-5WVCAVEA · UPX · Heap Buffer Overflow

heap-buffer-overflow medium Severity Claude medium · Security research firm medium · Maintainer - Discovered by Claude Mythos Preview REPORT Anthropic's analysis, sealed at approval. Disclosure to the maintainer was performed by Trail of Bits. ANT-2026-5WVCAVEA: Heap buffer overflow in unDTINIT...

The vulnerability of the PackLinuxElf64::un_DT_INIT() function in the src/p_lx_elf.cpp file of the UPX executable file loader allows a attacker to cause a service failure.

The vulnerability of the PackLinuxElf64::unDTINIT function in the src/plxelf.cpp file of the UPX executable file loader is related to buffer overflow. Exploiting this vulnerability could allow an attacker to cause a service failure...

DEBIAN-CVE-2025-2849

A vulnerability, which was classified as problematic, was found in UPX up to 5.0.0. Affected is the function PackLinuxElf64::unDTINIT of the file src/plxelf.cpp. The manipulation leads to heap-based buffer overflow. It is possible to launch the attack on the local host. The exploit has been...

Heap-based Buffer Overflow

Overview Affected versions of this package are vulnerable to Heap-based Buffer Overflow in the PackLinuxElf64::unDTINIT function in plxelf.cpp. An attacker can trigger a segfault with malicious input. Remediation A fix was pushed into the master branch but not yet published. References - GitHub...