CVE-2020-15888: Buffer Overflow
Lua through 5.4.0 mishandles the interaction between stack resizes and garbage collection, leading to a heap-based buffer overflow, heap-based buffer over-read, or use-after-free.
Affected Software
Remediation
Event History
Frequently Asked Questions
What is CVE-2020-15888?
CVE-2020-15888 is a vulnerability in Lua versions up to and including 5.4.0 that mishandles the interaction between stack resizes and garbage collection, leading to various memory-related issues.
What is the severity of CVE-2020-15888?
The severity of CVE-2020-15888 is high, with a CVSS score of 8.8.
Which software versions are affected by CVE-2020-15888?
The vulnerability affects Lua version 5.4.0.
What are the possible consequences of CVE-2020-15888?
The possible consequences of CVE-2020-15888 include heap-based buffer overflow, heap-based buffer over-read, or use-after-free.
Are there any known fixes for CVE-2020-15888?
At the moment, there is no known fix for CVE-2020-15888. It is recommended to follow the official Lua documentation for updates and security patches.