CVEs-PoC/2021/CVE-2021-44964.md

CVE-2021-44964

Description

Use after free in garbage collector and finalizer of lgc.c in Lua interpreter 5.4.0~5.4.3 allows attackers to perform Sandbox Escape via a crafted script file.

POC

Reference

• http://lua-users.org/lists/lua-l/2021-11/msg00186.html

Github

• https://github.com/ARPSyndicate/cvemon