CVE-2020-24342: Fedoraproject Fedora

High severity, CVSS 7.8. EPSS: 1.1% chance of exploitation in the next 30 days.

Lua through 5.4.0 allows a stack redzone cross in luaO_pushvfstring because a protection mechanism wrongly calls luaD_callnoyield twice in a row.

Affected products

• Fedoraproject Fedora: version 33 only
• Lua Lua: version 5.4.0 only

Published 2020-08-13. Last modified 2026-06-17.