CVE-2022-28805

CVE

Threat entity extracted from intelligence sources

Frequency

occurrences

First Seen

February 18, 2026

Last Seen

February 18, 2026

API

Exploited in Wild

—

Ransomware Use

—

Public Exploits

—

Attack Vector

—

Vulnerability Overview

Exploitation Activity

Exploitation Intelligence

Lua Vulnerabilities CVE-2022-33099 and CVE-2022-28805 Published42.6

Two vulnerabilities in Lua have been published, affecting versions 5.4.4 and below. CVE-2022-33099 relates to an issue in the luaG_runerror component, while CVE-2022-28805 concerns a missing luaK_exp2anyregup call in lparser.c, leading to heap-based buffer overflows. Both vulnerabilities could poten...

Public Exploits

Checking GitHub for proof-of-concept code…

Related Clusters (1)

Lua Vulnerabilities CVE-2022-33099 and CVE-2022-28805 Published

Feb 18·2 sources

Related Entities

Zero-day Exploit Lua

CVE-2022-28805

Vulnerability Overview

Exploitation Activity

Exploitation Intelligence

Public Exploits

CVE Details

Related Clusters (1)

Lua Vulnerabilities CVE-2022-33099 and CVE-2022-28805 Published

Related Articles (1)

CVE-2022-28805 singlevar in lparser.c in Lua from (including) 5.4.0 up to (excluding) 5.4.4 lacks a certain luaK_exp2anyregup call leading to a heap-based buffer over

Related Entities