CVE-2020-24342

Publication date

2020-08-13 18:54:20

Family

mitre

State

PUBLISHED

Description

Lua through 5.4.0 allows a stack redzone cross in luaO_pushvfstring because a protection mechanism wrongly calls luaD_callnoyield twice in a row.