#use-after-free

[ follow ]
#redis
fromInfoQ
3 weeks ago
Information security

Redis Critical Remote Code Execution Vulnerability Discovered After 13 Years

Critical CVE-2025-49844 UAF in Redis Lua scripting allows authenticated attackers to achieve remote code execution; upgrade patched Redis/Valkey and restrict access immediately.
fromThe Hacker News
1 month ago
Information security

13-Year Redis Flaw Exposed: CVSS 10.0 Vulnerability Lets Attackers Run Code Remotely

Authenticated attackers can exploit a Lua-related use-after-free in Redis (CVE-2025-49844) to achieve remote code execution; apply patches and restrict Lua execution immediately.
fromInfoQ
3 weeks ago
Information security

Redis Critical Remote Code Execution Vulnerability Discovered After 13 Years

[ Load more ]