{"id":"CVE-2026-7827","published":"2026-10-09T05:16:45.327","lastModified":"2026-10-09T17:16:50.163","description":"A stack-based buffer overflow in the _RdbLoadEntity function of the RDB graph decoders (src/serializers/decoders/*/decode_graph_entities.c) in FalkorDB before 4.18.4 allows a remote attacker who can issue Redis replication commands (for example, against an instance with no password configured) to cause a denial of service and possibly execute arbitrary code by supplying a crafted RDB stream with an attacker-controlled entity property count. The count sizes two variable-length arrays on the thread stack with no upper bound, and the decoder then fills them with attacker-supplied values.","cvssScore":8.1,"cvssSeverity":"HIGH","cvssVector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","cwes":["CWE-121"],"vendors":[],"products":[],"references":[{"url":"https://github.com/FalkorDB/FalkorDB/commit/7d15431aadf37588fadc2578b90c3afb5e8daa94","tags":[]},{"url":"https://github.com/FalkorDB/FalkorDB/pull/1973","tags":[]},{"url":"https://github.com/FalkorDB/FalkorDB/releases/tag/v4.18.4","tags":[]}],"exploitRefs":[{"url":"https://github.com/FalkorDB/FalkorDB/commit/7d15431aadf37588fadc2578b90c3afb5e8daa94","tags":[]},{"url":"https://github.com/FalkorDB/FalkorDB/pull/1973","tags":[]},{"url":"https://github.com/FalkorDB/FalkorDB/releases/tag/v4.18.4","tags":[]}],"hasPoc":true,"ai":{"summary":"A stack-based buffer overflow exists in FalkorDB's RDB graph decoders that allows remote attackers to cause denial of service or execute arbitrary code by crafting malicious RDB streams with controlled entity property counts. This vulnerability arises from insufficient bounds checking on variable-length arrays allocated on the stack.","exploitability":"Exploitation requires a remote attacker who can issue Redis replication commands against an unauthenticated instance, making it moderately difficult but achievable with existing access to the Redis protocol.","blast_radius":"If exploited, this vulnerability could impact all FalkorDB instances running versions prior to 4.18.4 that accept replication commands, potentially leading to complete service outages or remote code execution across affected systems.","remediation":"Upgrade to FalkorDB 4.18.4 or later immediately to remediate this vulnerability.","detection":"No reliable host or network indicator is derivable from the published description.","tags":["rce","dos","redis"],"model":"garnet-coder","analyzedAt":"2026-10-16T09:18:14.621Z"}}