How to fix EUVD-2024-22512?

Within 24 hours: Identify all affected systems and apply vendor patches immediately. If patching is delayed, consider network segmentation to limit exposure.

Is Stack Overflow affected by EUVD-2024-22512?

CVE-2024-25176 presents critical security risk, a stack-based buffer overflow vulnerability rated CVSS 9.8. Exploitation could allow attackers to corrupt memory, crash the application, or potentially execute arbitrary code.

EUVD-2024-22512

| CVE-2024-25176 CRITICAL

2025-07-07 [email protected]

9.8

CVSS 3.1

CVSS Vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Attack Vector

Network

Attack Complexity

Low

Privileges Required

None

User Interaction

None

Scope

Unchanged

Confidentiality

High

Integrity

High

Availability

High

Lifecycle Timeline

Analysis Generated

Mar 16, 2026 - 03:37 vuln.today

EUVD ID Assigned

Mar 16, 2026 - 03:37 euvd

EUVD-2024-22512

Patch Released

Mar 16, 2026 - 03:37 nvd

Patch available

PoC Detected

Nov 03, 2025 - 19:15 vuln.today

Public exploit code

CVE Published

Jul 07, 2025 - 17:15 nvd

CRITICAL 9.8

Description

LuaJIT through 2.1 and OpenRusty luajit2 before v2.1-20240626 have a stack-buffer-overflow in lj_strfmt_wfnum in lj_strfmt_num.c.

Analysis

LuaJIT through 2.1 and OpenRusty luajit2 before v2.1-20240626 have a stack-buffer-overflow in lj_strfmt_wfnum in lj_strfmt_num.c.

Technical Context

A buffer overflow occurs when data written to a buffer exceeds its allocated size, potentially overwriting adjacent memory and corrupting program state. This vulnerability is classified as Stack-based Buffer Overflow (CWE-121).

Affected Products

Affected products: Luajit Luajit

Remediation

A vendor patch is available — apply it immediately. Use memory-safe languages or bounds-checked functions. Enable ASLR, DEP/NX, and stack canaries. Apply vendor patches promptly.

Priority Score

Low Medium High Critical

KEV: 0

EPSS: +0.1

CVSS: +49

POC: +20

Vendor Status

Ubuntu

Priority: Medium

luajit

Release	Status	Version
jammy	needs-triage	-
noble	needs-triage	-
trusty	needs-triage	-
xenial	needs-triage	-
bionic	needs-triage	-
focal	needs-triage	-
upstream	needs-triage	-
plucky	ignored	end of life, was needs-triage
oracular	ignored	end of life, was needs-triage
questing	needs-triage	-

Debian

luajit

Release	Status	Fixed Version	Urgency
bullseye	fixed	2.1.0~beta3+dfsg-5.3+deb11u1	-
bullseye (security)	fixed	2.1.0~beta3+dfsg-5.3+deb11u1	-
bookworm	fixed	2.1.0~beta3+git20220320+dfsg-4.1+deb12u1	-
trixie	fixed	2.1.0+openresty20250117-2	-
forky, sid	fixed	2.1.0+openresty20251030-1	-
(unstable)	fixed	2.1.0+openresty20240314-1	-

DLA-4283-1

EUVD-2024-22512 vulnerability details – vuln.today

Back

EUVD-2024-22512

CVSS Vector

Lifecycle Timeline

Tags

Description

Analysis

Technical Context

Affected Products

Remediation

Priority Score

Vendor Status

Ubuntu

Debian

Share

EUVD-2024-22512

CVSS Vector

Lifecycle Timeline

Tags

Description

Analysis

Technical Context

Affected Products

Remediation

Priority Score

Vendor Status

Ubuntu

Debian

Share

External POC / Exploit Code