Lua Vulnerabilities CVE-2022-33099 and CVE-2022-28805 Published
First seen 18 Feb 2026, 14:22 UTC
•
•78% similarity
•43
Share:
Export
Ask AI about this cluster
Analyzing cluster data...
Referenced clusters:
Something went wrong. Please try again.
Cluster AI
Ask questions about this threat cluster with AI-powered analysis.
Get Researcher $29.99/moArticle Content
Browse articles
Two vulnerabilities in Lua have been published, affecting versions 5.4.4 and below. CVE-2022-33099 relates to an issue in the luaG_runerror component, while CVE-2022-28805 concerns a missing luaK_exp2anyregup call in lparser.c, leading to heap-based buffer overflows. Both vulnerabilities could potentially allow for exploitation in affected systems.
ThreatCluster AI
How this analysis works
Timeline
2022-04-08
CVE-2022-28805 published
2022-07-01
CVE-2022-33099 published
2026-02-18
Information published on CVE-2022-33099
2026-02-18
Information published on CVE-2022-28805