Launchpad.net

CVE 2019-20805

p_lx_elf.cpp in UPX before 3.96 has an integer overflow during unpacking via crafted values in a PT_DYNAMIC segment.

See the CVE page on Mitre.org for more details.