Denial Of Service (DoS)

upx is vulnerable to denial of service. The vulnerability exists due to the heap-based buffer over-read in the get_le64 function of bele.h, allowing an attacker to crash the application through the maliciously crafted Mach-O file.