Skip to main content
VulnerabilityPublished

Lua: Heap-use-after-free

Affects luaSource GCVE Database

0
Severity
High

Rated High by Threat Radar's AI analysis

Data as of 27 Oct 2026, 00:51 UTC

What to do

Affected software

ProductAffectedFixed in
OSS-Fuzzluapkg:generic/luaOther threatsAffected
  • >=46db6980cd776ae513633efbb86eb24a742e8ca2
Fixed in–

Check your own hosts for these packages with threat-finder (opens in a new tab), our free open-source scanner.

Description

A heap-use-after-free vulnerability has been reported in the Lua programming language, specifically in the insertkey function. The issue was identified through OSS-Fuzz and involves a read operation after memory has been freed, which can lead to undefined behavior or crashes.

References

Community reviews

Loading reviews…