Skip to content
Threat Feed
Subscribe

Product

Redis (7.2.7)

1 brief RSS
high threat

Remote Code Execution via Integer Overflow in RedisBloom Module

An integer overflow vulnerability (CVE-2024-55656) in the RedisBloom module's CMS.INITBYDIM command enables heap underallocation, allowing authenticated attackers to perform out-of-bounds memory operations and achieve remote code execution.

RedisBloom +4 rick2600 redis cve rce memory-corruption
1t 1c