VULNERABILITY INTELLIGENCE

CVE-2019-14296

CVSS score7.8 HIGH

EPSS probability1.80%

CISA KEVNot currently listed

Published2019-07-27

Last modified2026-06-17

Description

canUnpack in p_vmlinx.cpp in UPX 3.95 allows remote attackers to cause a denial of service (SEGV or buffer overflow, and application crash) or possibly have unspecified other impact via a crafted UPX packed file.