CVE-2026-7827: falha crítica em FalkorDB
Stack-based buffer overflow in FalkorDB _RdbLoadEntity via unbounded property count in crafted RDB
Publicada em
25Vexday Risk Score
Sem sinal de exploração. Nenhum artefato público de exploração conhecido até agora.
ssvc Trackcvss 9.2
probabilidade de exploração
—
exploração observada
nãonenhuma fonte reporta
A stack-based buffer overflow in the _RdbLoadEntity function of the RDB graph decoders (src/serializers/decoders/*/decode_graph_entities.c) in FalkorDB before 4.18.4 allows a remote attacker who can issue Redis replication commands (for example, against an instance with no password configured) to cause a denial of service and possibly execute arbitrary code by supplying a crafted RDB stream with an attacker-controlled entity property count. The count sizes two variable-length arrays on the thread stack with no upper bound, and the decoder then fills them with attacker-supplied values.
CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
Produtos afetados
FalkorDB · FalkorDBCVEs relacionadas — FalkorDB
No mesmo produto, das mais perigosas para as menos.
CVE-2026-107911HIGHType confusion in FalkorDB GRAPH.QUERY via the --bolt argumentEPSS —CVE-2026-107910CRITICALAuthentication bypass in FalkorDB Bolt endpoint via fail-open AUTH probe error handlingEPSS —CVE-2026-107909HIGHPre-authentication heap out-of-bounds write in FalkorDB Bolt WebSocket frame handling via unbounded payload lengthEPSS —CVE-2026-107908CRITICALPre-authentication heap out-of-bounds write in FalkorDB Bolt BoltReadHandler via RESET messageEPSS —CVE-2026-7826HIGHHeap out-of-bounds read in FalkorDB BufferSerializerIOv2_ReadBuffer via crafted RDBEPSS —CVE-2026-5759CRITICALDouble free and use-after-free in FalkorDB RdbLoadDeletedNodes allows remote code execution via crafted RDBEPSS —