Lucene search

K
osvGoogleOSV:CVE-2020-24342
HistoryAug 13, 2020 - 7:15 p.m.

CVE-2020-24342

2020-08-1319:15:13
Google
osv.dev
7
lua
stack redzone
vulnerability
software
luao_pushvfstring
luad_callnoyield

AI Score

6.6

Confidence

Low

EPSS

0.001

Percentile

50.1%

Lua through 5.4.0 allows a stack redzone cross in luaO_pushvfstring because a protection mechanism wrongly calls luaD_callnoyield twice in a row.

AI Score

6.6

Confidence

Low

EPSS

0.001

Percentile

50.1%