An assertion abort was found in upx MemBuffer::alloc() in mem.cpp, in version UPX 4.0.0. The flow allows attackers to cause a denial of service (abort) via a crafted file.
"https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2021-30501.json"