CVE-2026-107908

Name of the Vulnerable Software and Affected Versions FalkorDB versions prior to 4.20.0

Description A heap-based out-of-bounds write occurs in the BoltReadHandler() function within src/bolt/bolt api.c. A remote unauthenticated attacker can trigger this by sending a Bolt RESET message with a custom chunk size to the Bolt port. The issue arises because the size is validated using ASSERT(), which is removed during release builds. This allows the system to compute a destination pointer based on a 16-bit size provided via the wire, potentially moving buffered data up to 64 KiB before the start of the read buffer. This can lead to a denial of service or arbitrary code execution. Only deployments with the Bolt endpoint enabled via BOLT PORT are affected.

Recommendations Update to version 4.20.0 or later. Disable the BOLT PORT endpoint to minimize the risk of exploitation.