MICROSOFT-CVE-2021-45985

MEDIUM5.5

Mitre: CVE-2021-45985 Erroneous finalizer call in Lua leads to a heap-based buffer over-read

Published Apr 20, 2023

Modified 3 years ago

Details

This CVE was assigned by Mitre. Some Microsoft products consume Lau open-source software. The purpose of this document is to attest to the fact that the products listed in the Security Updates table have been updated to protect against this vulnerability.

References

ADVISORY

https://msrc.microsoft.com/update-guide/vulnerability/CVE-2021-45985

CVSS Analysis

CVSS v2.0

5.5

Upstream

CVE-2021-45985

Ecosystems

Timeline

PublishedApr 20, 2023

ModifiedApr 20, 2023