Out-of-bounds Read
singlevar in lparser.c in Lua through 5.4.4 lacks a certain luaK_exp2anyregup call, leading to a heap-based buffer over-read that might affect a system that compiles untrusted Lua code.
Buffer Overflow
Lua has a segmentation fault in `changedline` in `ldebug.c` (e.g., when called by `luaG_traceexec`) because it incorrectly expects that an `oldpc` value is always updated upon a return of the flow of control to a function.
Lua 5.3.5 has a use-after-free in lua_upvaluejoin in lapi.c. For example, a crash outcome might be achieved by an attacker who is able to trigger a debug.upvaluejoin call in which the arguments have certain relationships.
Release of Invalid Pointer or Reference
`lgc.c` mishandles the interaction between barriers and the sweep phase, leading to a memory access violation involving `collectgarbage`.
Access of Resource Using Incompatible Type ('Type Confusion')
Lua are affected by SEGV by type confusion in funcnamefromcode function in ldebug.c which can cause a local denial of service.