CVE-2023-41056

Name of the Vulnerable Software and Affected Versions Redis versions prior to 7.0.15 Redis versions prior to 7.2.4

Description The issue is related to integer overflow due to incorrect handling of memory buffer resizing, which can lead to heap overflow and potential remote code execution. The estimated number of potentially affected devices worldwide is over 1.4 million, mainly distributed in China, the United States, and other countries.

Recommendations For versions prior to 7.0.15, update to version 7.0.15 or later. For versions prior to 7.2.4, update to version 7.2.4 or later.