Upx

UPX is a widely deployed executable packer and compression utility that reduces binary size across multiple platforms, giving it substantial presence in the software supply chain despite a narrow product scope. The vulnerability profile centers on its core compression and decompression engine, where recurring weaknesses cluster around memory-safety issues including buffer overflows, out-of-bounds reads and writes, and arithmetic faults such as division-by-zero conditions that arise during format parsing and unpacking operations. These classes reflect the low-level binary manipulation inherent to a packer's design and the parsing complexity involved in handling diverse executable formats. Defenders should treat UPX-packed binaries as a potential vector for exploitation when the packer itself is vulnerable, since patching typically requires repacking or replacing affected binaries rather than standard patching workflows. Current severity, exploitation activity, and exposure counts are shown alongside this summary.