mirror of
https://github.com/0xMarcio/cve.git
synced 2025-05-28 01:04:30 +00:00
679 B
679 B
CVE-2020-15889
Description
Lua 5.4.0 has a getobjname heap-based buffer over-read because youngcollection in lgc.c uses markold for an insufficient number of list members.
POC
Reference
- http://lua-users.org/lists/lua-l/2020-07/msg00078.html
- http://lua-users.org/lists/lua-l/2020-07/msg00078.html
Github
No PoCs found on GitHub currently.