WickedEngine Out-of-Bounds Read Vulnerability in LUA Modules

An out-of-bounds read vulnerability has been identified in WickedEngine versions through 0.71.727, specifically within the LUA modules. The issue arises in the 'lparser.C' program file, where a potential vulnerability in the 'singlevar()' function was cloned from the Lua reference implementation but not properly patched. This oversight can lead to incorrect code generation under certain conditions.

Impact

Exploitation of this vulnerability could result in an out-of-bounds read, potentially allowing for memory access beyond the intended limits, which could be exploited to read sensitive information or cause a crash.

Remediation

Users can update to the latest version of WickedEngine, where this vulnerability has been addressed, to mitigate this issue.