CVE-2020-27796

A heap-based buffer over-read was discovered in the invert_pt_dynamic function in p_lx_elf.cpp in UPX 4.0.0 via a crafted Mach-O file.

Affected products

Alt Linux, Debian, Upx

Upx

= 4.0.0

CVSS 3.1

7.8 HIGH

EPSS

0.3% (26th percentile)

Weakness

CWE-119, CWE-125

NVD status

Modified

Published

2022-08-25