luajit CVE Vulnerabilities & CVE List (6)

Products (CPE): — CVEs: 6

luajit vulnerability overview

Aggregates CVE and security vulnerability intelligence across all luajit-related products, including CVSS, EPSS, publication dates, and vulnerability intelligence data.

Common weakness patterns include vendor risk buffer overflow and vendor risk memory corruption, with potential vendor impact application crash and vendor impact memory corruption across vendor surface software deployment use cases.

Vulnerability distribution trend (last 24 months)

Showing 16 of 6 CVEs
«« First « Prev Page 1 / 1 Next »
CVE Summary Source Max CVSS EPSS % Published Updated
CVE-2024-25178 LuaJIT through 2.1 and OpenRusty luajit2 before v2.1-20240314 have an out-of-bounds read in the stack-overflow handler in lj_state.c. [email protected] 9.1 0.54% 2025-07-07 2026-06-17
CVE-2024-25177 LuaJIT through 2.1 and OpenRusty luajit2 before v2.1-20240314 have an unsinking of IR_FSTORE for NULL metatable, which leads to Denial of Service (DoS). [email protected] 7.5 0.46% 2025-07-07 2026-06-17
CVE-2024-25176 LuaJIT through 2.1 and OpenRusty luajit2 before v2.1-20240626 have a stack-buffer-overflow in lj_strfmt_wfnum in lj_strfmt_num.c. [email protected] 9.8 0.48% 2025-07-07 2026-06-17
CVE-2020-24372 LuaJIT through 2.1.0-beta3 has an out-of-bounds read in lj_err_run in lj_err.c. [email protected] 7.5 1.47% 2020-08-17 2026-06-16
CVE-2020-15890 LuaJit through 2.1.0-beta3 has an out-of-bounds read because __gc handler frame traversal is mishandled. [email protected] 7.5 2.86% 2020-07-21 2026-06-16
CVE-2019-19391 In LuaJIT through 2.0.5, as used in Moonjit before 2.1.2 and other products, debug.getinfo has a type confusion issue that leads to arbitrary memory write or read operations, because certain cases involving valid stack levels and > options are mishandled. NOTE: The LuaJIT project owner states that the debug libary is unsafe by definition and that this is not a vulnerability. When LuaJIT was originally developed, the expectation was that the entire debug library had no security guarantees and thu [email protected] 9.1 1.33% 2019-11-29 2026-06-16
«« First « Prev Page 1 / 1 Next »
cvelogic Threat Intelligence