mirror of
https://github.com/0xMarcio/cve.git
synced 2025-05-07 11:06:19 +00:00
680 B
680 B
CVE-2020-24342
Description
Lua through 5.4.0 allows a stack redzone cross in luaO_pushvfstring because a protection mechanism wrongly calls luaD_callnoyield twice in a row.
POC
Reference
- http://lua-users.org/lists/lua-l/2020-07/msg00052.html
- http://lua-users.org/lists/lua-l/2020-07/msg00052.html
Github
No PoCs found on GitHub currently.