CVE Browser

lua: heap-based buffer over-read

lua: heap buffer overflow in luaG_errormsg() in ldebug.c due to uncontrolled recursion in error handling

lua: heap buffer overread

lua: use after free allows Sandbox Escape

lua: type confusion in funcnamefromcode in ldebug.c could result in local DoS

lua: stack overflow in lua_resume of ldo.c allows a DoS via a crafted script file

lua: NULL pointer dereference when trying to access debug information via the line hook of a stripped function

lua: mishandles the interaction between barriers and the sweep phase leading to a memory access violation involving collectgarbage

lua: segmentation fault in getlocal and setlocal functions in ldebug.c

lua: buffer overflow in luaO_pushvfstring

lua: segmentation fault in changedline in ldebug.c

lua: stack resizes and garbage collection leads to heap-based buffer overflow

lua: heap-based buffer over-read in lgc.c

lua: use-after-free in lua_upvaluejoin in lapi.c resulting in denial of service

lua: overflow flaw in vararg functions