Omri Ben-Bassat

The issue is caused by an integer overflow in the cloud-brd binary, leading to a heap-based buffer overflow. After heap shaping, an attacker can achieve code execution in the context of the cloud-brd binary that runs at the root level.

The issue is related to an integer wrap-around in the `malloc`, `realloc`, and `memalign` functions, leading to improper memory assignment. This can result in arbitrary memory allocation, causing unexpected behavior such as a crash or remote code injection/execution. The vulnerability can be exploited by a remote attacker to cause a denial of service or execute arbitrary code.

The issue is related to an integer overflow bug in 32-bit Redis versions 4.0 or newer, which could be exploited to corrupt the heap and potentially result in remote code execution. By default, authenticated Redis users have access to all configuration parameters and can change the safe default, making the system vulnerable. This problem only affects 32-bit Redis. The estimated number of potentially affected devices worldwide is not specified. There is no information about real-world incidents where this issue was exploited.