| Package | Affected versions | Patched versions |
|---|---|---|
| upx | = 4.0.0 |
A heap-based buffer over-read was discovered in the get_le32 function in bele.h in UPX 4.0.0 via a crafted Mach-O file.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free