Lua 5.3.5 has a use-after-free in lua_upvaluejoin in lapi.c
published January 23, 2019
CVSS
—
EPSS
17%
Percentile
97.1
In the wild
Unconfirmed
What it is
Lua 5.3.5 has a use-after-free in lua_upvaluejoin in lapi.c. For example, a crash outcome might be achieved by an attacker who is able to trigger a debug.upvaluejoin call in which the arguments have certain relationships.
The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.17359 · 97.1th percentile
Published
2019-01-23T00:00Z
EPSS history
Timeline
23 JAN 00:00Z
Lua 5.3.5 has a use-after-free in lua_upvaluejoin in lapi.c