Lua through 5.4.0 has a getobjname heap-based buffer over-read because youngcollection in lgc.c uses markold for an insufficient number of list members. References:

Created lua tracking bugs for this issue: Affects: fedora-all [
….



Source link

You must be logged in to post a comment.