Upx Team · Upx · CVE-2018-11243
**Name of the Vulnerable Software and Affected Versions**
UPX version 3.95
**Description**
The issue allows remote attackers to cause a denial of service, limit the ability of a malware scanner to operate on the entire original data, or possibly have unspecified other impact via a crafted file. This is due to a double free error in the PackLinuxElf64::unpack function in p lx elf.cpp.
**Recommendations**
For UPX version 3.95, consider updating to a newer version that addresses this issue, as the current version may allow for denial of service or other unspecified impacts due to the double free error in the PackLinuxElf64::unpack function.