CVE Vulnerabilities

CVE-2024-25176

Published: Jul 07, 2025 | Modified: Jul 07, 2025

CVSS 3.x

N/A

Source:

NVD

CVSS 2.x

RedHat/V2

RedHat/V3

Ubuntu

Vulnerability-free packages from our partners

Additional information

NVD	https://nvd.nist.gov/vuln/detail/CVE-2024-25176
CWE	https://cwe.mitre.org/data/definitions/.html

LuaJIT through 2.1 has a stack-buffer-overflow in lj_strfmt_wfnum in lj_strfmt_num.c.

References

https://gist.github.com/pwnhacker0x18/cd75d01fc7c9b6c85c183fbe5353d276
https://github.com/LuaJIT/LuaJIT/commit/343ce0edaf3906a62022936175b2f5410024cbfc
https://github.com/LuaJIT/LuaJIT/issues/1149

Aqua Container Security

Aqua Security is the largest pure-play cloud native security company, providing customers the freedom to innovate and run their businesses with minimal friction. The Aqua Cloud Native Security Platform provides prevention, detection, and response automation across the entire application lifecycle to secure the build, secure cloud infrastructure and secure running workloads wherever they are deployed.