Multiple CVEs Identified in LuaJIT and OpenRusty Vulnerabilities

First seen 18 Feb 2026, 12:23 UTC • Api.Msrc.Microsoft

•34

Article Content

Include sub-articles 1 / 1

Browse articles

ThreatCluster

Two critical vulnerabilities have been identified in LuaJIT and OpenRusty, affecting versions through 2.1 and prior to specific updates. CVE-2024-25178 involves an out-of-bounds read in the stack-overflow handler, while CVE-2024-25176 pertains to a stack-buffer-overflow in string formatting functions. Both vulnerabilities were published on July 7, 2025.

How this analysis works

Timeline

2025-07-07

CVE-2024-25178 published

2025-07-07

CVE-2024-25176 published

2026-02-18

Information published about CVE-2024-25178

2026-02-18

Information published about CVE-2024-25176

Attack Flow

Continue Reading

Microsoft Issues Emergency Patches for Critical ASP.NET Core Vulnerability Global Phishing Campaign Uses Lua Loader Disguised as TrueType Font Files Discovery of Sabotage Malware 'fast16' Predating Stuxnet

Multiple CVEs Identified in LuaJIT and OpenRusty Vulnerabilities

Article Content

Timeline

More articles in this cluster

Attack Flow

Defensive Countermeasures

Extracted Entities

Continue Reading