Luajit
Luajit: vulnerabilidades y CVE
Luajit tiene 7 vulnerabilidades publicadas, 1 de ellas en los últimos 12 meses. 4 son críticas y 0 figuran en el catálogo de explotación activa de CISA.
CVE7
Últimos 12 meses1
Críticas4
Explotadas activamente0
Todas las vulnerabilidades en el catálogo →⭐ Seguir esta tecnología
Últimas vulnerabilidades
| CVE | Severidad | EPSS | Explotación activa | Publicada | Descripción |
|---|---|---|---|---|---|
| CVE-2026-40959 | Crítica (9.3) | 0.19% | — | 16 abr 2026 | Luanti 5 before 5.15.2, when LuaJIT is used, allows a Lua sandbox escape via a crafted mod. |
| CVE-2024-25178 | Crítica (9.1) | 0.62% | — | 7 jul 2025 | LuaJIT through 2.1 and OpenRusty luajit2 before v2.1-20240314 have an out-of-bounds read in the stack-overflow handler in lj_state.c. |
| CVE-2024-25177 | Alta (7.5) | 0.53% | — | 7 jul 2025 | LuaJIT through 2.1 and OpenRusty luajit2 before v2.1-20240314 have an unsinking of IR_FSTORE for NULL metatable, which leads to Denial of Service (DoS). |
| CVE-2024-25176 | Crítica (9.8) | 0.56% | — | 7 jul 2025 | LuaJIT through 2.1 and OpenRusty luajit2 before v2.1-20240626 have a stack-buffer-overflow in lj_strfmt_wfnum in lj_strfmt_num.c. |
| CVE-2020-24372 | Alta (7.5) | 1.5% | — | 17 ago 2020 | LuaJIT through 2.1.0-beta3 has an out-of-bounds read in lj_err_run in lj_err.c. |
| CVE-2020-15890 | Alta (7.5) | 2.9% | — | 21 jul 2020 | LuaJit through 2.1.0-beta3 has an out-of-bounds read because __gc handler frame traversal is mishandled. |
| CVE-2019-19391 | Crítica (9.1) | 1.3% | — | 29 nov 2019 | In LuaJIT through 2.0.5, as used in Moonjit before 2.1.2 and other products, debug.getinfo has a type confusion issue that leads to arbitrary memory write or read operations, because certain cases involving valid stack… |