CVE-2022-33099: Fedoraproject Fedora

High severity, CVSS 7.5. EPSS: 2.8% chance of exploitation in the next 30 days.

An issue in the component luaG_runerror of Lua v5.4.4 and below leads to a heap-buffer overflow when a recursive error occurs.

Affected products

• Fedoraproject Fedora: version 35 only; version 36 only
• Lua Lua: from 5.4.2, up to and including 5.4.4

Published 2022-07-01. Last modified 2026-06-17.