Medium severity5.5NVD Advisory· Published May 27, 2021· Updated Jun 17, 2026
CVE-2021-30501
CVE-2021-30501
Description
An assertion abort was found in upx MemBuffer::alloc() in mem.cpp, in version UPX 4.0.0. The flow allows attackers to cause a denial of service (abort) via a crafted file.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
7- cpe:2.3:o:fedoraproject:fedora:33:*:*:*:*:*:*:*
- cpe:2.3:o:redhat:enterprise_linux:7.0:*:*:*:*:*:*:*
- UPX/UPXdescription
- osv-coords2 versionspkg:rpm/opensuse/upx&distro=openSUSE%20Leap%2015.4pkg:rpm/suse/upx&distro=SUSE%20Package%20Hub%2015%20SP4
< 4.0.2-bp154.4.6.1+ 1 more
- (no CPE)range: < 4.0.2-bp154.4.6.1
- (no CPE)range: < 4.0.2-bp154.4.6.1
Patches
Vulnerability mechanics
References
4- bugzilla.redhat.com/show_bug.cginvdIssue TrackingPatchThird Party Advisory
- github.com/upx/upx/commit/28e761cd42211dfe0124b7a29b2f74730f453e46nvdPatchThird Party Advisory
- github.com/upx/upx/issues/486nvdExploitIssue TrackingThird Party Advisory
- github.com/upx/upx/pull/487nvdExploitPatchThird Party Advisory
News mentions
0No linked articles in our index yet.