Luajit

3 CVEs product

Monthly

Sort: Newest CVSS Score EPSS Score Oldest

CVE-2024-25178 CRITICAL POC PATCH Act Now

LuaJIT through 2.1 and OpenRusty luajit2 before v2.1-20240314 have an out-of-bounds read in the stack-overflow handler in lj_state.c.

Information Disclosure Buffer Overflow Ubuntu Debian Luajit +2

NVD GitHub

CVSS 3.1

9.1

EPSS

0.1%

CVE-2024-25177 HIGH POC PATCH This Week

LuaJIT through 2.1 and OpenRusty luajit2 before v2.1-20240314 have an unsinking of IR_FSTORE for NULL metatable, which leads to Denial of Service (DoS).

Null Pointer Dereference Denial Of Service Ubuntu Debian Luajit +2

NVD GitHub

CVSS 3.1

7.5

EPSS

0.4%

CVE-2024-25176 CRITICAL POC PATCH Act Now

LuaJIT through 2.1 and OpenRusty luajit2 before v2.1-20240626 have a stack-buffer-overflow in lj_strfmt_wfnum in lj_strfmt_num.c.

Buffer Overflow Stack Overflow Ubuntu Debian Luajit +2

NVD GitHub

CVSS 3.1

9.8

EPSS

0.1%

CVE-2024-25178

EPSS 0% CVSS 9.1

CRITICAL POC PATCH Act Now

LuaJIT through 2.1 and OpenRusty luajit2 before v2.1-20240314 have an out-of-bounds read in the stack-overflow handler in lj_state.c.

Information Disclosure Buffer Overflow Ubuntu +4

NVD GitHub

CVE-2024-25177

EPSS 0% CVSS 7.5

HIGH POC PATCH This Week

LuaJIT through 2.1 and OpenRusty luajit2 before v2.1-20240314 have an unsinking of IR_FSTORE for NULL metatable, which leads to Denial of Service (DoS).

Null Pointer Dereference Denial Of Service Ubuntu +4

NVD GitHub

CVE-2024-25176

EPSS 0% CVSS 9.8

CRITICAL POC PATCH Act Now

LuaJIT through 2.1 and OpenRusty luajit2 before v2.1-20240626 have a stack-buffer-overflow in lj_strfmt_wfnum in lj_strfmt_num.c.

Buffer Overflow Stack Overflow Ubuntu +4

NVD GitHub