Show filters
6 Total Results
Displaying 1-6 of 6
Sort by:
Attacker Value
Unknown
CVE-2020-24371
Disclosure Date: August 17, 2020 (last updated February 21, 2025)
lgc.c in Lua 5.4.0 mishandles the interaction between barriers and the sweep phase, leading to a memory access violation involving collectgarbage.
0
Attacker Value
Unknown
CVE-2020-24370
Disclosure Date: August 17, 2020 (last updated February 21, 2025)
ldebug.c in Lua 5.4.0 allows a negation overflow and segmentation fault in getlocal and setlocal, as demonstrated by getlocal(3,2^31).
0
Attacker Value
Unknown
CVE-2020-24369
Disclosure Date: August 17, 2020 (last updated February 21, 2025)
ldebug.c in Lua 5.4.0 attempts to access debug information via the line hook of a stripped function, leading to a NULL pointer dereference.
0
Attacker Value
Unknown
CVE-2020-24342
Disclosure Date: August 13, 2020 (last updated February 21, 2025)
Lua through 5.4.0 allows a stack redzone cross in luaO_pushvfstring because a protection mechanism wrongly calls luaD_callnoyield twice in a row.
0
Attacker Value
Unknown
CVE-2020-15888
Disclosure Date: July 21, 2020 (last updated February 21, 2025)
Lua through 5.4.0 mishandles the interaction between stack resizes and garbage collection, leading to a heap-based buffer overflow, heap-based buffer over-read, or use-after-free.
0
Attacker Value
Unknown
CVE-2020-15889
Disclosure Date: July 21, 2020 (last updated February 21, 2025)
Lua 5.4.0 has a getobjname heap-based buffer over-read because youngcollection in lgc.c uses markold for an insufficient number of list members.
0
