← All advisories

High severity7.5NVD Advisory· Published Jul 21, 2020· Updated Jun 17, 2026

CVE-2020-15890

CVE-2020-15890

Description

LuaJit through 2.1.0-beta3 has an out-of-bounds read because __gc handler frame traversal is mishandled.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

8

LuaJit/LuaJitdescription
LuaJIT/LuaJIT5 versions
cpe:2.3:a:luajit:luajit:*:*:*:*:*:*:*:*+ 4 more
- cpe:2.3:a:luajit:luajit:*:*:*:*:*:*:*:*range: <=2.0.5
- cpe:2.3:a:luajit:luajit:2.1.0:beta1:*:*:*:*:*:*
- cpe:2.3:a:luajit:luajit:2.1.0:beta2:*:*:*:*:*:*
- cpe:2.3:a:luajit:luajit:2.1.0:beta3:*:*:*:*:*:*
- (no CPE)range: <=2.1.0-beta3
Debian/linux
cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*
Canonical/Ubuntu Linux
cpe:2.3:o:canonical:ubuntu_linux:16.04:*:*:*:esm:*:*:*

Patches

Vulnerability mechanics

References

4

github.com/LuaJIT/LuaJIT/issues/601nvdExploitThird Party Advisory
lists.debian.org/debian-lts-announce/2020/07/msg00026.htmlnvdMailing ListThird Party Advisory
usn.ubuntu.com/4501-1/nvdThird Party Advisory
lists.debian.org/debian-lts-announce/2025/08/msg00022.htmlnvd

News mentions

0

No linked articles in our index yet.