PT-2025-10460 · Lua · Lua
Published
2025-03-09
·
Updated
2025-03-10
·
CVE-2025-26204
None
No severity ratings or metrics are available. When they are, we'll update the corresponding info on the page.
Name of the Vulnerable Software and Affected Versions
Lua version 5.4.7
Description
The issue is related to an out-of-bounds read and segmentation violation in the equalkey function in ltable.c when the debug library is used. It is worth noting that the documentation for the debug library states that its functions can violate basic assumptions about Lua code, including the possibility of crashes.
Recommendations
For Lua version 5.4.7, consider avoiding the use of the debug library or its functions that may cause crashes, as a temporary workaround until a more stable solution is available.
Found an issue in the description? Have something to add? Feel free to write us 👾
Related Identifiers
Affected Products
Lua