CVE-2025-67482

Lua segfault in unpack()

Low · published February 3, 2026

CVSS v4.0

1.7

EPSS

Percentile

25.0

In the wild

Unconfirmed

What it is

Vulnerability in Wikimedia Foundation Scribunto, Wikimedia Foundation luasandbox. This vulnerability is associated with program files includes/Engines/LuaCommon/lualib/mwInit.Lua, library.C.

This issue affects Scribunto: from * before 1.39.16, 1.43.6, 1.44.3, 1.45.1; luasandbox: from * before fea2304f8f6ab30314369a612f4f5b165e68e95a.

The record

Technical detail

CVSS v4.0: 1.7 · LOW
Vector: CVSS:4.0/AV:N/AC:H/AT:P/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:U
EPSS: 0.00331 · 25.0th percentile
Published: 2026-02-03T01:28Z

EPSS history

Timeline

03 FEB 01:28Z
Lua segfault in unpack()
cvelistv5