CVE-2020-15888: Buffer Overflow

July 21, 2020 (updated July 21, 2021)

Lua mishandles the interaction between stack resizes and garbage collection, leading to a heap-based buffer overflow, heap-based buffer over-read, or use-after-free.

References

nvd.nist.gov/vuln/detail/CVE-2020-15888

Detect and mitigate CVE-2020-15888 with GitLab Dependency Scanning

Secure your software supply chain by verifying that all open source dependencies used in your projects contain no disclosed vulnerabilities. Learn more about Dependency Scanning →