Lua 5.4.0 (fixed in 5.4.1) has a segmentation fault in changedline in ldebug.c (e.g., when called by luaGtraceexec) because it incorrectly expects that an oldpc value is always updated upon a return of the flow of control to a function.
Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. Further investigation showed that it was not a security issue. Notes: none.
Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. Further investigation showed that it was not a security issue. Notes: none.
ldebug.c in Lua 5.4.0 attempts to access debug information via the line hook of a stripped function, leading to a NULL pointer dereference.
Lua through 5.4.0 mishandles the interaction between stack resizes and garbage collection, leading to a heap-based buffer overflow, heap-based buffer over-read, or use-after-free.
Lua 5.4.0 has a getobjname heap-based buffer over-read because youngcollection in lgc.c uses markold for an insufficient number of list members.
End of life: 9/25/2020, Latest version: 5.3.6
End of life: 9/25/2020, Latest version: 5.3.6
End of life: 3/7/2015, Latest version: 5.2.4
End of life: 3/7/2015, Latest version: 5.2.4
End of life: 2/17/2012, Latest version: 5.1.5
End of life: 2/17/2012, Latest version: 5.1.5
End of life: 6/26/2006, Latest version: 5.0.3
End of life: 6/26/2006, Latest version: 5.0.3
End of life: 7/4/2002, Latest version: 4.0.1
End of life: 7/4/2002, Latest version: 4.0.1
End of life: 2/22/2000, Latest version: 3.2.2
End of life: 2/22/2000, Latest version: 3.2.2