GHSA-qqv4-567f-4g4p: Type confusion in the Civilization V Lua Sandbox
A vulnerability was identified in the loadstring function of the Lua Sandbox component in Civilization V version 1.0.3.144. Executing a manipulation can cause type confusion, and the attack may be performed remotely. The exploit has been publicly disclosed and may be used. The vendor was contacted early but did not respond.
CERT24