{"description":"Trending threats, MITRE ATT\u0026CK coverage, and detection metadata. Fed continuously.","favicon":"https://feed.craftedsignal.io/favicon-32x32.png","feed_url":"https://feed.craftedsignal.io/cpes/cpe2.3aredisredis_array_aggregator/feed.json","home_page_url":"https://feed.craftedsignal.io/","icon":"https://feed.craftedsignal.io/apple-touch-icon.png","items":[{"_cs_actors":[],"_cs_cpes":["cpe:2.3:a:redis:redis_array_aggregator:*:*:*:*:*:*:*:*"],"_cs_cves":[{"cvss":7.5,"id":"CVE-2026-93572"}],"_cs_exploited":false,"_cs_has_poc":false,"_cs_poc_references":[],"_cs_products":["RedisArrayAggregator"],"_cs_severities":["low"],"_cs_tags":["denial-of-service","memory-exhaustion","redis"],"_cs_type":"advisory","_cs_vendors":["Redis"],"content_html":"\u003cp\u003eCVE-2026-93572 is a resource exhaustion vulnerability affecting the RedisArrayAggregator component. The issue stems from the eager allocation of ArrayList capacity based on nested RESP array headers. The implementation checks 'maxElements' and 'maxNestedArrayDepth' independently, failing to account for the cumulative memory impact of nested array allocations. An attacker can send a series of nested RESP array headers, each specifying a large length, which forces the application to create 'new ArrayList\u0026lt;RedisMessage\u0026gt;(length)' for every header. Because the memory is reserved upon receipt of the header before the actual array elements are processed, an attacker can consume massive amounts of system memory with a relatively small input payload, leading to a Denial of Service (DoS) state. This vulnerability highlights the risk of relying on independent limit checks in recursive parsing logic.\u003c/p\u003e\n\u003ch2 id=\"impact\"\u003eImpact\u003c/h2\u003e\n\u003cp\u003eSuccessful exploitation results in a Denial of Service due to memory exhaustion. The vulnerability allows an attacker to disproportionately consume system memory relative to the size of the malicious input, which can crash the application or destabilize the host system depending on the available heap space and resource constraints.\u003c/p\u003e\n\u003ch2 id=\"recommendation\"\u003eRecommendation\u003c/h2\u003e\n\u003col\u003e\n\u003cli\u003eAudit applications utilizing RedisArrayAggregator to determine if user-controlled input can reach the affected RESP decoding logic.\u003c/li\u003e\n\u003cli\u003eImplement strict input validation or application-level rate limiting for incoming RESP traffic until a patch is available.\u003c/li\u003e\n\u003cli\u003eMonitor application memory usage and heap allocation patterns; unusual spikes correlated with high-frequency incoming array headers may indicate exploitation attempts.\u003c/li\u003e\n\u003c/ol\u003e\n","date_modified":"2026-09-18T14:05:50Z","date_published":"2026-09-18T14:05:50Z","id":"https://feed.craftedsignal.io/briefs/2026-09-redis-array-aggregator-dos/","summary":"A vulnerability in RedisArrayAggregator allows remote attackers to trigger memory exhaustion via a crafted RESP payload that forces eager allocation of array capacity.","title":"Resource Exhaustion in RedisArrayAggregator","url":"https://feed.craftedsignal.io/briefs/2026-09-redis-array-aggregator-dos/"}],"language":"en","title":"CraftedSignal Threat Feed - Cpe:2.3:a:redis:redis_array_aggregator:*:*:*:*:*:*:*:*","version":"https://jsonfeed.org/version/1.1"}