A heap-based buffer overflow was discovered in upx, during the generic pointer ‘p’ points to an inaccessible address in func get_le32(). The problem is essentially caused in PackLinuxElf32::elf_lookup() at p_lx_elf.cpp:5382.
[
{
"vendor": "n/a",
"product": "upx",
"versions": [
{
"version": "upx before 4.0.0-git-c6b9e3c62d15",
"status": "affected"
}
]
}
]