CVE-2021-30500: Fedoraproject Fedora

High severity, CVSS 7.8. EPSS: 1.2% chance of exploitation in the next 30 days.

Null pointer dereference was found in upx PackLinuxElf::canUnpack() in p_lx_elf.cpp,in version UPX 4.0.0. That allow attackers to execute arbitrary code and cause a denial of service via a crafted file.

Affected products

• Fedoraproject Fedora: version 33 only
• Red Hat Enterprise Linux: version 7.0 only
• Upx Upx: version 4.0.0 only

Published 2021-05-27. Last modified 2026-06-17.