Predictive Vulnerability Intelligence.

Product

  • Product
  • Pricing
  • Documentation

Company

  • About
  • Partnerships
  • Blog
  • Support

Legal

  • Terms
  • Privacy
  • Data Licensing

© 2026 FAUCET Technologies LLC. All rights reserved.

CVE-2022-28805

23
FAUCET Score

CVE-2022-28805 is a critical heap-based buffer over-read vulnerability in Lua versions 5.4.0 through 5.4.3, specifically affecting the lparser.c component. This flaw, stemming from a missing luaK_exp2anyregup call, could impact systems compiling untrusted Lua code, including Fedora distributions. With a CVSS score of 9.1 (Critical), it presents a low-complexity network attack vector with high impact on confidentiality and availability. There is currently no evidence of active exploitation, public exploit code, or significant community discussion surrounding this vulnerability.

Impacted Technologies

VendorProductVersion(s)CPE
>= 5.4.0, < 5.4.5CPE matchmatch criteria
cpe:2.3:a:lua:lua:*:*:*:*:*:*:*:*
35CPE matchmatch criteria
cpe:2.3:o:fedoraproject:fedora:35:*:*:*:*:*:*:*
36CPE matchmatch criteria
cpe:2.3:o:fedoraproject:fedora:36:*:*:*:*:*:*:*

CVSS Data

CVSS version used by this source: 3.1

9.1CRITICAL

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H

Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
NONE
Availability Impact
HIGH
Exploitability Score
3.9
Impact Score
5.2
CvssVersion
3.1

Exploit Intelligence

EPSS Score
3.00%
Probability of exploitation in next 30 days
EPSS Percentile
86.0%
Percentile rank of EPSS score among Peer Group
As of 2026-07-28
Model: v2026.06.15
This CVE's current EPSS score of 0.0300 is in the 77th percentile among its peer group of 36,897 CVEs.

Social Chatter

No social media mentions found for this CVE.

The average CVE in this peer group has 0.0 Twitter, 0.1 Reddit, 0.3 Bluesky, 0.3 Mastodon, and 2.4 GitHub mentions.

Media Mentions

No media coverage found for this CVE.

The average CVE in this peer group has 0.3 InfoSec Media, 0.0 Vendor Blog, and 0.0 Security Researcher mentions.

Remediation

Patch Available

Vendor Patches (48)

github_advisorypatch availablevia nvd_reference
View patch
microsoftpatch availablevia msrc
Product: 19082-17084Fixed in: 5.2.1-3
microsoftpatch availablevia msrc
Product: 18751-17084Fixed in: 5.2.1-3
microsoftpatch availablevia msrc
Product: 18676-16820Fixed in: 5.3.5-9
microsoftpatch availablevia msrc
Product: 18750-16823Fixed in: 5.4.3-2
microsoftpatch availablevia msrc
Product: 19666-17084Fixed in: 18.2.2-1
microsoftpatch availablevia msrc
Product: 16531-12139Fixed in: 5.4.3-2
microsoftpatch availablevia msrc
Product: 16532-12139Fixed in: 5.4.3-2
microsoftpatch availablevia msrc
Product: 16533-12139Fixed in: 5.4.3-2
microsoftpatch availablevia msrc
Product: 16534-12139Fixed in: 5.4.3-2
microsoftpatch availablevia msrc
Product: 16524-12137Fixed in: 5.3.5-9
microsoftpatch availablevia msrc
Product: 16525-12137Fixed in: 5.3.5-9
microsoftpatch availablevia msrc
Product: 16526-12137Fixed in: 5.3.5-9
microsoftpatch availablevia msrc
Product: 16527-12138Fixed in: 5.3.5-9
microsoftpatch availablevia msrc
Product: 16528-12138Fixed in: 5.3.5-9
microsoftpatch availablevia msrc
Product: 16529-12138Fixed in: 5.3.5-9
microsoftpatch availablevia msrc
Product: 16530-12139Fixed in: 5.4.3-2
microsoftpatch availablevia msrc
Product: 16535-12140Fixed in: 5.4.3-2
microsoftpatch availablevia msrc
Product: 16536-12140Fixed in: 5.4.3-2
microsoftpatch availablevia msrc
Product: 16537-12140Fixed in: 5.4.3-2
microsoftpatch availablevia msrc
Product: 16538-12140Fixed in: 5.4.3-2
microsoftpatch availablevia msrc
Product: 16539-12140Fixed in: 5.4.3-2
microsoftpatch availablevia msrc
Product: 16540-12356Fixed in: 5.2.1-3
microsoftpatch availablevia msrc
Product: 16541-12357Fixed in: 5.2.1-3
microsoftpatch availablevia msrc
Product: azl3 ntopng 5.2.1-5 on Azure Linux 3.0Fixed in: 5.2.1-3
microsoftpatch availablevia msrc
Product: azl3 ntopng 5.2.1-3 on Azure Linux 3.0Fixed in: 5.2.1-3
microsoftpatch availablevia msrc
Product: cm1 lua 5.3.5-9 on CBL Mariner 1.0Fixed in: 5.3.5-9
microsoftpatch availablevia msrc
Product: cbl2 lua 5.4.3-2 on CBL Mariner 2.0Fixed in: 5.4.3-2
microsoftpatch availablevia msrc
Product: azl3 ceph 18.2.2-8 on Azure Linux 3.0Fixed in: 18.2.2-1
microsoftpatch availablevia msrc
Product: lua-5.3.5-9.cm1.x86_64.rpm on CBL Mariner 1.0 x64Fixed in: 5.3.5-9
microsoftpatch availablevia msrc
Product: lua-devel-5.3.5-9.cm1.x86_64.rpm on CBL Mariner 1.0 x64Fixed in: 5.3.5-9
microsoftpatch availablevia msrc
Product: lua-debuginfo-5.3.5-9.cm1.x86_64.rpm on CBL Mariner 1.0 x64Fixed in: 5.3.5-9
microsoftpatch availablevia msrc
Product: lua-5.3.5-9.cm1.aarch64.rpm on CBL Mariner 1.0 ARMFixed in: 5.3.5-9
microsoftpatch availablevia msrc
Product: lua-devel-5.3.5-9.cm1.aarch64.rpm on CBL Mariner 1.0 ARMFixed in: 5.3.5-9
microsoftpatch availablevia msrc
Product: lua-debuginfo-5.3.5-9.cm1.aarch64.rpm on CBL Mariner 1.0 ARMFixed in: 5.3.5-9
microsoftpatch availablevia msrc
Product: lua-5.4.3-2.cm2.x86_64.rpm on CBL Mariner 2.0 x64Fixed in: 5.4.3-2
microsoftpatch availablevia msrc
Product: lua-devel-5.4.3-2.cm2.x86_64.rpm on CBL Mariner 2.0 x64Fixed in: 5.4.3-2
microsoftpatch availablevia msrc
Product: lua-libs-5.4.3-2.cm2.x86_64.rpm on CBL Mariner 2.0 x64Fixed in: 5.4.3-2
microsoftpatch availablevia msrc
Product: lua-static-5.4.3-2.cm2.x86_64.rpm on CBL Mariner 2.0 x64Fixed in: 5.4.3-2
microsoftpatch availablevia msrc
Product: lua-debuginfo-5.4.3-2.cm2.x86_64.rpm on CBL Mariner 2.0 x64Fixed in: 5.4.3-2
microsoftpatch availablevia msrc
Product: lua-5.4.3-2.cm2.aarch64.rpm on CBL Mariner 2.0 ARMFixed in: 5.4.3-2
microsoftpatch availablevia msrc
Product: lua-devel-5.4.3-2.cm2.aarch64.rpm on CBL Mariner 2.0 ARMFixed in: 5.4.3-2
microsoftpatch availablevia msrc
Product: lua-libs-5.4.3-2.cm2.aarch64.rpm on CBL Mariner 2.0 ARMFixed in: 5.4.3-2
microsoftpatch availablevia msrc
Product: lua-static-5.4.3-2.cm2.aarch64.rpm on CBL Mariner 2.0 ARMFixed in: 5.4.3-2
microsoftpatch availablevia msrc
Product: lua-debuginfo-5.4.3-2.cm2.aarch64.rpm on CBL Mariner 2.0 ARMFixed in: 5.4.3-2
microsoftpatch availablevia msrc
Product: ntopng-5.2.1-3.azl3.x86_64.rpm on Azure Linux 3.0 x64Fixed in: 5.2.1-3
microsoftpatch availablevia msrc
Product: ntopng-5.2.1-3.azl3.aarch64.rpm on Azure Linux 3.0 ARMFixed in: 5.2.1-3
redhatpatch availablevia redhat_api
Product: Red Hat Enterprise Linux 9Fixed in: lua-0:5.4.4-3.el9
View patch

Vendor Advisories (3)

microsoft2024-Jun/CVE-2022-28805

CVE-2022-28805

Jun 11, 2024
microsoft2022-Apr/CVE-2022-28805Critical

singlevar in lparser.c in Lua from (including) 5.4.0 up to (excluding) 5.4.4 lacks a certain luaK_exp2anyregup call leading to a heap-based buffer over-read that might affect a system that compiles untrusted Lua code.

Apr 12, 2022
redhatCVE-2022-28805Low

lua: heap buffer overread

Apr 8, 2022

References

github.com / lua/lua/commit/1f3c6f4534c6411313361697d98d1145a1f030fa
PatchThird Party Advisory
lists.fedoraproject.org / archives/list/package-announce%40lists.fedoraproject.org/message/RJNJ66IFDUKWJJZXHGOLRGIA3HWWC36R
Third Party Advisory
lists.fedoraproject.org / archives/list/package-announce%40lists.fedoraproject.org/message/UHYZOEFDVLVAD6EEP4CDW6DNONIVVHPA
Third Party Advisory
lua-users.org / lists/lua-l/2022-02/msg00001.html
ExploitMailing ListThird Party Advisory
lua-users.org / lists/lua-l/2022-02/msg00070.html
ExploitMailing ListThird Party Advisory
lua-users.org / lists/lua-l/2022-04/msg00009.html
ExploitMailing ListThird Party Advisory
security.gentoo.org / glsa/202305-23
Third Party Advisory