u
upx
Security Risk Profile
25
/100
lowSecurity Risk Score
Comprehensive risk assessment based on 24 vulnerabilities, EPSS scores, exploitation status, and remediation availability.
📅 Data spans from May 18, 2018 to present
24
Total CVEs
9
Critical+High
0
Exploited
0
Unpatched
Threat Assessment
Avg CVSS
5.9
Base severity
Avg EPSS
0%
Exploit probability
Unpatched
0
Critical/High
Risk Level
25/100
low
Severity Distribution
Critical
1High
8Medium
13Low
2Exploit Likelihood
>50% chance
020-50%
05-20%
0<5%
2Age Distribution
Common Weaknesses (CWE)
1
Buffer Overflow
16
2
Null Pointer Dereference
2
3
Divide by Zero
1
4
Input Validation
1
5
Double Free
1
Most Affected Products
1. alpine/upx160
2. UPX upx26
3. Upx Project Upx17
4. Fedoraproject Fedora13
5. debian/upx-ucl3
Recent Vulnerabilities
See more →CVE-2025-2849
CVSS 4.8EPSS 0%medium
UPX p_lx_elf.cpp un_DT_INIT heap-based overflow
Mar 27, 2025🔧 No Patch
CVE-2024-3209
CVSS 9.8EPSS 0%critical
UPX bele.h get_ne64 heap-based overflow
Apr 2, 2024
REDHAT-BUG-2160381
CVSS 4.0medium
Jan 12, 2023🔧 No Patch
REDHAT-BUG-2160382
CVSS 4.0medium
Jan 12, 2023🔧 No Patch
CVE-2023-23457
CVSS 5.5medium
Upx: segv on packlinuxelf64::invert_pt_dynamic() in p_lx_elf.cpp
Jan 12, 2023
CVE-2023-23456
CVSS 5.5medium
Upx: heap-buffer-overflow in packtmt::pack()
Jan 12, 2023
CVE-2020-27802
CVSS 5.5medium
Aug 25, 2022
CVE-2020-27801
CVSS 7.8high
Aug 25, 2022
CVE-2020-27800
CVSS 7.8high
Aug 25, 2022
CVE-2020-27799
CVSS 7.8high
Aug 25, 2022
Monitor upx in Real-Time
Get instant alerts when new vulnerabilities are discovered. Stay ahead of security threats with SecAlerts.