CVE-2020-24369 – ldebug.c in Lua 5.4.0 attempts to access debug information via the line h

ldebug.c in Lua 5.4.0 attempts to access debug information via the line hook of a stripped function, leading to a NULL pointer dereference.

 

Source: https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-24369

Reference (s):

• https://github.com/lua/lua/commit/ae5b5ba529753c7a653901ffc29b5ea24c3fdf3a
• https://www.lua.org/bugs.html#5.4.0-12