CVE-2021-44964

Use after free in garbage collector and finalizer of lgc.c in Lua interpreter 5.4.0~5.4.3 allows attackers to perform Sandbox Escape via a crafted script file

published March 14, 2022

CVSS
—
EPSS
1%
Percentile
62.0
In the wild
Unconfirmed
What it is

Use after free in garbage collector and finalizer of lgc.c in Lua interpreter 5.4.0~5.4.3 allows attackers to perform Sandbox Escape via a crafted script file.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00985 · 62.0th percentile
Published
2022-03-14T14:24Z
EPSS history
Timeline
  • 14 MAR 14:24Z
    Use after free in garbage collector and finalizer of lgc.c in Lua interpreter 5.4.0~5.4.3 allows attackers to perform Sandbox Escape via a crafted script file
    cvelistv5