OSV-2025-266 Heap-buffer-overflow in lj_buf_ruleb128

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=408513931 Crash type: Heap-buffer-overflow READ 1 Crash state: ljbufruleb128 ljbcread cpparser...

PT-2025-28637 · Git +1 · Tarantool

Name of the Vulnerable Software and Affected Versions: luajit affected versions not specified Description: The software contains a heap-buffer-overflow read issue. The crash state involves lj buf ruleb128, lj bcread, and cpparser. Recommendations: At the moment, there is no information about a...

tarantool:lua_load_test: Heap-buffer-overflow in lj_buf_ruleb128

Detailed Report: https://oss-fuzz.com/testcase?key=6668477190701056 Project: tarantool Fuzzing Engine: afl Fuzz Target: lualoadtest Job Type: aflasantarantool Platform Id: linux Crash Type: Heap-buffer-overflow READ 1 Crash Address: 0x51500005d6a0 Crash State: ljbufruleb128 ljbcread cpparser...