# Redis.

Every CVE that names Redis among its affected products, newest first. Vendors and products are as the CNA wrote them.

## Records, newest first

- [Redis TLS pending-data list use-after-free](https://agentprime.io/advisories/CVE-2026-81934.md)
  `CVE-2026-81934` · CVE record: Redis Redis and 1 more · CVSS 7.5 High · Not analysed yet · Published 27 Aug 2026 · Tags: Memory corruption
- [Double free in Redis](https://agentprime.io/advisories/CVE-2026-66373.md)
  `CVE-2026-66373` · CVE record: Redis Redis · CVSS 7.5 High · Not analysed yet · Published 25 Jul 2026 · Tags: Memory corruption
- [redis-server RESTORE invalid memory access may allow remote code execution](https://agentprime.io/advisories/CVE-2026-25243.md)
  `CVE-2026-25243` · CVE record: redis redis · CVSS 7.7 High · Not analysed yet · Published 5 May 2026 · Tags: Memory corruption
- [redis-server Lua use-after-free may allow remote code execution](https://agentprime.io/advisories/CVE-2026-23631.md)
  `CVE-2026-23631` · CVE record: redis redis · CVSS 6.1 Medium · Not analysed yet · Published 5 May 2026 · Tags: Memory corruption
- [redis-server use-after-free in unblock client flow may allow remote code execution](https://agentprime.io/advisories/CVE-2026-23479.md)
  `CVE-2026-23479` · CVE record: redis redis · CVSS 7.7 High · Not analysed yet · Published 5 May 2026 · Tags: Memory corruption
- [Redis: Bug in XACKDEL may lead to stack overflow and potential RCE](https://agentprime.io/advisories/CVE-2025-62507.md)
  `CVE-2025-62507` · CVE record: redis redis · CVSS 7.7 High · Not analysed yet · Published 4 Nov 2025 · Tags: Memory corruption, CWE-20
- [Redis Lua Use-After-Free may lead to remote code execution](https://agentprime.io/advisories/CVE-2025-49844.md)
  `CVE-2025-49844` · CVE record: redis redis · CVSS 10.0 Critical · Critical (CVSS 9+, CVSS 7+ and EPSS) · EPSS 0.83 · Not analysed yet · Published 3 Oct 2025 · Tags: Memory corruption
- [Redis is vulnerable to DoS via specially crafted LUA scripts](https://agentprime.io/advisories/CVE-2025-46819.md)
  `CVE-2025-46819` · CVE record: redis redis · CVSS 6.3 Medium · Not analysed yet · Published 3 Oct 2025 · Tags: Memory corruption
- [Redis: Authenticated users can execute LUA scripts as a different user](https://agentprime.io/advisories/CVE-2025-46818.md)
  `CVE-2025-46818` · CVE record: redis redis · CVSS 6.0 Medium · Not analysed yet · Published 3 Oct 2025 · Tags: Code injection
- [Lua library commands may lead to integer overflow and potential RCE](https://agentprime.io/advisories/CVE-2025-46817.md)
  `CVE-2025-46817` · CVE record: redis redis · CVSS 7.0 High · Not analysed yet · Published 3 Oct 2025 · Tags: Memory corruption
- [Memory leak in Redis](https://agentprime.io/advisories/CVE-2025-46686.md)
  `CVE-2025-46686` · CVE record: Redis Redis · CVSS 3.5 Low · Not analysed yet · Published 23 Jul 2025 · Tags: Denial of service
- [Redis DoS Vulnerability due to bad connection error handling](https://agentprime.io/advisories/CVE-2025-48367.md)
  `CVE-2025-48367` · CVE record: redis redis · CVSS 7.5 High · Not analysed yet · Published 7 Jul 2025 · Tags: Denial of service
- [Redis allows out of bounds writes in hyperloglog commands leading to RCE](https://agentprime.io/advisories/CVE-2025-32023.md)
  `CVE-2025-32023` · CVE record: redis redis · CVSS 7.0 High · Not analysed yet · Published 7 Jul 2025 · Tags: Memory corruption
- [redis-check-aof may lead to stack overflow and potential RCE](https://agentprime.io/advisories/CVE-2025-27151.md)
  `CVE-2025-27151` · CVE record: redis redis · CVSS 4.7 Medium · Not analysed yet · Published 29 May 2025 · Tags: Memory corruption, CWE-20
- [Redis DoS Vulnerability due to unlimited growth of output buffers abused by unauthenticated client](https://agentprime.io/advisories/CVE-2025-21605.md)
  `CVE-2025-21605` · CVE record: redis redis · CVSS 7.5 High · Not analysed yet · Published 23 Apr 2025 · Tags: Denial of service
- [Redis allows denial-of-service due to malformed ACL selectors](https://agentprime.io/advisories/CVE-2024-51741.md)
  `CVE-2024-51741` · CVE record: redis redis · CVSS 4.4 Medium · Not analysed yet · Published 6 Jan 2025 · Tags: CWE-20
- [Redis' Lua library commands may lead to remote code execution](https://agentprime.io/advisories/CVE-2024-46981.md)
  `CVE-2024-46981` · CVE record: redis redis · CVSS 7.0 High · Not analysed yet · Published 6 Jan 2025 · Tags: Memory corruption
- [Lua library commands may lead to stack overflow and RCE in Redis](https://agentprime.io/advisories/CVE-2024-31449.md)
  `CVE-2024-31449` · CVE record: redis redis · CVSS 7.0 High · Not analysed yet · Published 7 Oct 2024 · Tags: Memory corruption, CWE-20
- [Denial-of-service due to unbounded pattern matching in Redis](https://agentprime.io/advisories/CVE-2024-31228.md)
  `CVE-2024-31228` · CVE record: redis redis · CVSS 5.5 Medium · Not analysed yet · Published 7 Oct 2024 · Tags: Denial of service
- [Denial-of-service due to malformed ACL selectors in Redis](https://agentprime.io/advisories/CVE-2024-31227.md)
  `CVE-2024-31227` · CVE record: redis redis · CVSS 4.4 Medium · Not analysed yet · Published 7 Oct 2024 · Tags: CWE-20
- [Redis vulnerable to integer overflow in certain payloads](https://agentprime.io/advisories/CVE-2023-41056.md)
  `CVE-2023-41056` · CVE record: redis redis · CVSS 8.1 High · Not analysed yet · Published 10 Jan 2024 · Tags: Memory corruption, CWE-762
- [Redis Unix-domain socket may have be exposed with the wrong permissions for a short time window.](https://agentprime.io/advisories/CVE-2023-45145.md)
  `CVE-2023-45145` · CVE record: redis redis · CVSS 3.6 Low · Not analysed yet · Published 18 Oct 2023 · Tags: Information disclosure
- [Redis SORT_RO may bypass ACL configuration](https://agentprime.io/advisories/CVE-2023-41053.md)
  `CVE-2023-41053` · CVE record: redis redis · CVSS 3.3 Low · Not analysed yet · Published 6 Sept 2023 · Tags: Privilege escalation
- [Heap overflow issue with the Lua cjson library used by Redis](https://agentprime.io/advisories/CVE-2022-24834.md)
  `CVE-2022-24834` · CVE record: redis redis · CVSS 7.0 High · Critical (CVSS 7+ and EPSS) · EPSS 0.41 · Not analysed yet · Published 13 Jul 2023 · Tags: Memory corruption
- [Heap overflow in COMMAND GETKEYS and ACL evaluation in Redis](https://agentprime.io/advisories/CVE-2023-36824.md)
  `CVE-2023-36824` · CVE record: redis redis · CVSS 7.4 High · Critical (CVSS 7+ and EPSS) · EPSS 0.77 · Not analysed yet · Published 11 Jul 2023 · Tags: Memory corruption
- [\`HINCRBYFLOAT\` can be used to crash a redis-server process](https://agentprime.io/advisories/CVE-2023-28856.md)
  `CVE-2023-28856` · CVE record: redis redis · CVSS 5.5 Medium · Not analysed yet · Published 18 Apr 2023 · Tags: Denial of service, CWE-20
- [Specially crafted MSETNX command can lead to denial-of-service](https://agentprime.io/advisories/CVE-2023-28425.md)
  `CVE-2023-28425` · CVE record: redis redis · CVSS 5.5 Medium · EPSS 0.59 · Not analysed yet · Published 20 Mar 2023 · Tags: Command injection
- [Integer Overflow in several Redis commands can lead to denial of service.](https://agentprime.io/advisories/CVE-2023-25155.md)
  `CVE-2023-25155` · CVE record: redis redis · CVSS 5.5 Medium · Not analysed yet · Published 2 Mar 2023 · Tags: Memory corruption
- [Redis string pattern matching can be abused to achieve Denial of Service](https://agentprime.io/advisories/CVE-2022-36021.md)
  `CVE-2022-36021` · CVE record: redis redis · CVSS 5.5 Medium · EPSS 0.60 · Not analysed yet · Published 1 Mar 2023 · Tags: Denial of service
- [Integer overflow in certain command arguments can drive Redis to OOM panic](https://agentprime.io/advisories/CVE-2022-35977.md)
  `CVE-2022-35977` · CVE record: redis redis · CVSS 5.5 Medium · EPSS 0.14 · Not analysed yet · Published 20 Jan 2023 · Tags: Memory corruption
- [Integer overflow in multiple Redis commands can lead to denial-of-service](https://agentprime.io/advisories/CVE-2023-22458.md)
  `CVE-2023-22458` · CVE record: redis redis · CVSS 5.5 Medium · EPSS 0.72 · Not analysed yet · Published 20 Jan 2023 · Tags: Memory corruption
- [Redis on Windows dbghelp.dll uncontrolled search path](https://agentprime.io/advisories/CVE-2022-3734.md)
  `CVE-2022-3734` · CVE record: unspecified Redis · CVSS 6.3 Medium · Not analysed yet · Published 28 Oct 2022 · Tags: CWE-426
- [Redis Crash Report debug.c sigsegvHandler denial of service](https://agentprime.io/advisories/CVE-2022-3647.md)
  `CVE-2022-3647` · CVE record: Redis · CVSS 3.1 Low · Not analysed yet · Published 21 Oct 2022 · Tags: Denial of service
- [Redis subject to Integer Overflow leading to Remote Code Execution via Heap Overflow](https://agentprime.io/advisories/CVE-2022-35951.md)
  `CVE-2022-35951` · CVE record: redis redis · CVSS 7.0 High · Not analysed yet · Published 23 Sept 2022 · Tags: Memory corruption
- [Potential heap overflow in Redis](https://agentprime.io/advisories/CVE-2022-31144.md)
  `CVE-2022-31144` · CVE record: redis redis · CVSS 7.0 High · Not analysed yet · Published 19 Jul 2022 · Tags: Memory corruption
- [A Malformed Lua script can crash Redis](https://agentprime.io/advisories/CVE-2022-24736.md)
  `CVE-2022-24736` · CVE record: redis redis · CVSS 3.3 Low · Not analysed yet · Published 27 Apr 2022 · Tags: Memory corruption
- [Lua scripts can be manipulated to overcome ACL rules in Redis](https://agentprime.io/advisories/CVE-2022-24735.md)
  `CVE-2022-24735` · CVE record: redis redis · CVSS 3.9 Low · Not analysed yet · Published 27 Apr 2022 · Tags: Code injection
- [Integer overflow issue with strings in Redis](https://agentprime.io/advisories/CVE-2021-41099.md)
  `CVE-2021-41099` · CVE record: redis redis · CVSS 7.5 High · Not analysed yet · Published 4 Oct 2021 · Tags: Memory corruption
- [Integer overflow that can lead to heap overflow in redis-cli, redis-sentinel on some platforms](https://agentprime.io/advisories/CVE-2021-32762.md)
  `CVE-2021-32762` · CVE record: redis redis · CVSS 7.5 High · Not analysed yet · Published 4 Oct 2021 · Tags: Memory corruption
- [Integer overflow issue with intsets in Redis](https://agentprime.io/advisories/CVE-2021-32687.md)
  `CVE-2021-32687` · CVE record: redis redis · CVSS 7.5 High · Not analysed yet · Published 4 Oct 2021 · Tags: Memory corruption
- [DoS vulnerability in Redis](https://agentprime.io/advisories/CVE-2021-32675.md)
  `CVE-2021-32675` · CVE record: redis redis · CVSS 7.5 High · Critical (CVSS 7+ and EPSS) · EPSS 0.16 · Not analysed yet · Published 4 Oct 2021 · Tags: Denial of service
- [Vulnerability in Lua Debugger in Redis](https://agentprime.io/advisories/CVE-2021-32672.md)
  `CVE-2021-32672` · CVE record: redis redis · CVSS 5.3 Medium · Not analysed yet · Published 4 Oct 2021 · Tags: Memory corruption
- [Integer overflow issue with Streams in Redis](https://agentprime.io/advisories/CVE-2021-32627.md)
  `CVE-2021-32627` · CVE record: redis redis · CVSS 7.5 High · Not analysed yet · Published 4 Oct 2021 · Tags: Memory corruption
- [Vulnerability in handling large ziplists](https://agentprime.io/advisories/CVE-2021-32628.md)
  `CVE-2021-32628` · CVE record: redis redis · CVSS 7.5 High · Critical (CVSS 7+ and EPSS) · EPSS 0.14 · Not analysed yet · Published 4 Oct 2021 · Tags: Memory corruption
- [Lua scripts can overflow the heap-based Lua stack in Redis](https://agentprime.io/advisories/CVE-2021-32626.md)
  `CVE-2021-32626` · CVE record: redis redis · CVSS 7.5 High · Critical (CVSS 7+ and EPSS) · EPSS 0.16 · Not analysed yet · Published 4 Oct 2021 · Tags: Memory corruption
- [Integer overflow issues with \*BIT commands on 32-bit systems](https://agentprime.io/advisories/CVE-2021-32761.md)
  `CVE-2021-32761` · CVE record: redis redis · CVSS 7.5 High · Critical (CVSS 7+ and EPSS) · EPSS 0.30 · Not analysed yet · Published 21 Jul 2021 · Tags: Memory corruption
- [Redis vulnerability in STRALGO LCS on 32-bit systems](https://agentprime.io/advisories/CVE-2021-32625.md)
  `CVE-2021-32625` · CVE record: redis redis · CVSS 7.5 High · Not analysed yet · Published 2 Jun 2021 · Tags: Memory corruption
- [Vulnerability in the COPY command for large intsets](https://agentprime.io/advisories/CVE-2021-29478.md)
  `CVE-2021-29478` · CVE record: redis redis · CVSS 7.5 High · Not analysed yet · Published 4 May 2021 · Tags: Memory corruption
- [Vulnerability in the STRALGO LCS command](https://agentprime.io/advisories/CVE-2021-29477.md)
  `CVE-2021-29477` · CVE record: redis redis · CVSS 7.5 High · Not analysed yet · Published 4 May 2021 · Tags: Memory corruption
- [Buffer overflow in redis](https://agentprime.io/advisories/CVE-2021-3470.md)
  `CVE-2021-3470` · CVE record: redis · No CVSS score · Not analysed yet · Published 31 Mar 2021 · Tags: Memory corruption
- [Integer overflow on 32-bit systems](https://agentprime.io/advisories/CVE-2021-21309.md)
  `CVE-2021-21309` · CVE record: redis redis · CVSS 5.4 Medium · Not analysed yet · Published 26 Feb 2021 · Tags: Memory corruption
- [Insecure temporary file vulnerability in Redis 2.6 related to /tmp/redis.ds.](https://agentprime.io/advisories/CVE-2013-0180.md)
  `CVE-2013-0180` · CVE record: Redis Labs Redis · No CVSS score · Not analysed yet · Published 1 Nov 2019
- [Insecure temporary file vulnerability in Redis before 2.6 related to /tmp/redis-%p.vm.](https://agentprime.io/advisories/CVE-2013-0178.md)
  `CVE-2013-0178` · CVE record: Redis Labs Redis · No CVSS score · Not analysed yet · Published 1 Nov 2019
- [Stack-based buffer overflow in redis](https://agentprime.io/advisories/CVE-2019-10193.md)
  `CVE-2019-10193` · CVE record: Redis Labs redis · CVSS 7.2 High · Critical (CVSS 7+ and EPSS) · EPSS 0.23 · Not analysed yet · Published 11 Jul 2019 · Tags: Memory corruption
- [Heap-based buffer overflow in redis](https://agentprime.io/advisories/CVE-2019-10192.md)
  `CVE-2019-10192` · CVE record: Redis Labs redis · CVSS 7.2 High · Critical (CVSS 7+ and EPSS) · EPSS 0.26 · Not analysed yet · Published 11 Jul 2019 · Tags: Memory corruption
- [Redis: A buffer overflow in Redis 3.2.x prior to 3.2.4 causes arbitrary code execution when a…](https://agentprime.io/advisories/CVE-2016-8339.md)
  `CVE-2016-8339` · CVE record: Redis Redis · CVSS 6.6 Medium · EPSS 0.15 · Not analysed yet · Published 28 Oct 2016

## Filters and formats

Filters are query parameters on this URL: `q` (words, as in a web search engine: `"a phrase"`, `OR`, `-word`; an id; a package or product name), `severity` (low, medium, high or critical), `critical=1`, `kev=1`, `ecosystem` (npm, pypi, packagist, go, maven, rubygems, crates, nuget, hex), `kind=package`, `assigner` (a CNA’s short name), `min_score` and `state`. Each record’s title links to its Markdown page.

- The same list as JSON: <https://api.agentprime.io/v1/advisories?technology=redis>
- Every list: <https://agentprime.io/advisories.md>, critical: <https://agentprime.io/advisories/critical.md>; by weakness: <https://agentprime.io/advisories/tag/sql-injection.md> and the other tags in <https://agentprime.io/llms.txt>; by technology: `/advisories/technology/<slug>.md` (`fortinet-fortimail`)

---

The web page: <https://agentprime.io/advisories/technology/redis/>. Everything for agents: <https://agentprime.io/llms.txt>.