TLDR InfoSec · MISCELLANEOUS

BYTECODE BREAKDOWN: UNRAVELING FACTORIO'S LUA SECURITY FLAWS

memorycorruption.net47 min read

Summary from the TLDR InfoSec newsletter

This blog post provides a detailed breakdown of the flaws in Lua runtime that led to an exploit in the video game Factorio. It's possible to leak memory addresses and manipulate objects in memory by exploiting Lua's handling of numbers as doubles. This manipulation allows for security flaws like bypassing ASLR in programs using Lua.