CVE-2024-3209
A vulnerability was found in UPX up to 4.2.2. It has been rated as critical. This issue affects the function get_ne64 of the file bele.h. The manipulation leads to heap-based buffer overflow. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-259055. NOTE: The vendor was contacted early about this disclosure but did not respond in any way.
- Upx
- ≤ 4.2.2
- CVSS 3.1
- 9.8 CRITICAL
- EPSS
- 1.2% (67th percentile)
- Weakness
- CWE-122
- NVD status
- Analyzed
- Published
- 2024-04-02
CVE-2024-3209 at NVD
No indexed exploits for CVE-2024-3209 yet
Our index is partial: it proves presence, never absence
No exploit for CVE-2024-3209 has been indexed yet. Our index is built from live traffic and upstream syncs, so this page can only say what it knows — not that no exploit exists.