CVE-2021-30501CWE-20

CVE-2021-30501: vulnerability in upx

Published · Updated

Follow this CVE+ Monitor upx+ Monitor upx-ucl

E-mail alert when it lands in KEV, gets a public PoC or its score goes up.

3Vexday Risk Score

No sign of exploitation. No public exploitation artifact known so far.

ssvc Trackepss 1.0%
An assertion abort was found in upx MemBuffer::alloc() in mem.cpp, in version UPX 4.0.0. The flow allows attackers to cause a denial of service (abort) via a crafted file.
Affected products
n/a · upx