LuaJIT Stack-Buffer-Overflow Vulnerability in Number Formatting Function

A stack-buffer-overflow vulnerability has been identified in LuaJIT versions through 2.1. The issue occurs in the 'lj_strfmt_wfnum' function within 'lj_strfmt_num.c', where improper handling of number formatting precision can lead to memory corruption.

Impact

Exploitation of this vulnerability causes a stack-buffer overflow, which can lead to memory corruption and potentially allow for arbitrary code execution.

Reproduction

The vulnerability can be reproduced by using a crafted Lua script that exploits the number formatting function. This can be done by writing a function that generates a number format string designed to trigger the buffer overflow, and then calling this function with 'lua_pcall' to execute it within the LuaJIT environment.

Remediation

Users can upgrade to the latest version of LuaJIT, where this vulnerability has been fixed.