CVE-2024-25178

NVD

https://nvd.nist.gov/vuln/detail/CVE-2024-25178

Severity

9.1

Critical

CVSS V3

Eliminate CVEs with Chainguard hardened images

Build, ship, and run secure software with minimal, hardened container images — rebuilt from source daily and guarded under our industry-leading remediation SLA.

Start for free

Description

LuaJIT through 2.1 and OpenRusty luajit2 before v2.1-20240314 have an out-of-bounds read in the stack-overflow handler in lj_state.c.

References

https://nvd.nist.gov/vuln/detail/CVE-2024-25178
https://github.com/advisories/GHSA-vw7w-mrf6-7vrv
https://lists.debian.org/debian-lts-announce/2025/08/msg00022.html
https://gist.github.com/pwnhacker0x18/423b4292f301ab274b42d5ed6e0b87d8
https://github.com/LuaJIT/LuaJIT/issues/1152
https://github.com/LuaJIT/LuaJIT/commit/defe61a56751a0db5f00ff3ab7b8f45436ba74c8
https://github.com/openresty/luajit2/commit/defe61a56751a0db5f00ff3ab7b8f45436ba74c8

Affected packages

Advisories are based on vulnerability information provided by Grype from Anchore. Learn how Chainguard creates security advisories.

The trusted source for open source

Talk to an expert

Privacy

Terms

CVE-2024-25178

Severity

Description

References

Affected packages

The trusted source for open source

Product

Solutions

Customers

Resources

Company