How severe is CVE-2021-20285?

This vulnerability has a severity rating of MEDIUM with a CVSS score of 6.6 out of 10.

What type of vulnerability is CVE-2021-20285?

This is classified as CWE-119, which is a common weakness in software security.

CVE-2021-20285

MEDIUM Year: 2021

CVSS v3 Score

6.6

Medium

CVSS v2 Score

8.3

High

Weakness Type

CWE-119

View all →

Vulnerability Description

A flaw was found in upx canPack in p_lx_elf.cpp in UPX 3.96. This flaw allows attackers to cause a denial of service (SEGV or buffer overflow and application crash) or possibly have unspecified other impacts via a crafted ELF. The highest threat from this vulnerability is to system availability.

CVE-2015-7085

MEDIUM

CVSS:6.6(Medium)

Apple QuickTime before 7.7.9 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted movie file, a different vulnerabilit...

CWE-1192015