{"id":"CVE-2025-49112","aliases":["AZL-62243","BELL-CVE-2025-49112","BIT-keydb-2025-49112","BIT-redis-2025-49112","BIT-valkey-2025-49112","DEBIAN-CVE-2025-49112","EUVD-2025-16611","GHSA-xhp4-6g9v-4xvj","OESA-2025-1630","SUSE-SU-2025:01942-1","SUSE-SU-2025:02231-1","UBUNTU-CVE-2025-49112","USN-7893-1","openSUSE-SU-2025:15306-1"],"status":"published","title":"setDeferredReply in networking.c in Valkey through 8.1.1 has an integer underflow for prev-\u003esize ...","description":"setDeferredReply in networking.c in Valkey through 8.1.1 has an integer underflow for prev-\u003esize - prev-\u003eused.","severity":{"version":"3.1","score":3.1,"vector":"CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L","level":"low","assessor":"cna","from":"cve"},"epss":{"day":"2026-11-09","score":0.00258,"percentile":0.17553,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":true},"cwes":["CWE-191"],"published":"2025-06-02T00:00:00Z","modified":"2026-11-05T05:40:51Z","fixes":[{"ecosystem":"Azure Linux:3","package":"valkey","fixed_in":["8.0.3-3"],"sources":["osv"]},{"ecosystem":"Alpaquita:23","package":"redis","fixed_in":["7.0.15-r7"],"sources":["osv"]},{"ecosystem":"Alpaquita:25","package":"redis","fixed_in":["8.0.6-r0"],"sources":["osv"]},{"ecosystem":"Bitnami","package":"valkey","fixed_in":["8.1.4"],"sources":["osv"]},{"ecosystem":"Debian:14","package":"redict","fixed_in":["7.3.5+ds-1"],"sources":["osv"]},{"ecosystem":"Debian:13","package":"valkey","fixed_in":["8.1.1+dfsg1-2"],"sources":["osv"]},{"ecosystem":"Debian:14","package":"valkey","fixed_in":["8.1.1+dfsg1-2"],"sources":["osv"]},{"ecosystem":"Ubuntu:24.04:LTS","package":"valkey","fixed_in":["7.2.11+dfsg1-0ubuntu0.2"],"sources":["osv"]},{"ecosystem":"Ubuntu:25.10","package":"valkey","fixed_in":["8.1.4+dfsg1-0ubuntu0.2"],"sources":["osv"]}],"affected":[{"source":"osv","ecosystem":"Azure Linux:3","package":"valkey","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8.0.3-3"}]}]},{"source":"osv","ecosystem":"Alpaquita:23","package":"redis","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"7.0.9-r0"},{"fixed":"7.0.15-r7"}]}]},{"source":"osv","ecosystem":"Alpaquita:25","package":"redis","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"8.0.2-r0"},{"fixed":"8.0.6-r0"}]}]},{"source":"osv","ecosystem":"Alpaquita:stream","package":"redis","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"8.0.2-r0"}]}]},{"source":"osv","ecosystem":"Bitnami","package":"keydb"},{"source":"osv","ecosystem":"Bitnami","package":"redis"},{"source":"osv","ecosystem":"Bitnami","package":"valkey","ranges":[{"type":"SEMVER","events":[{"introduced":"0"},{"fixed":"8.1.4"}]}]},{"source":"osv","ecosystem":"Debian:14","package":"redict","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.3.5+ds-1"}]}],"versions":["7.3.0+ds-1","7.3.0+ds-2","7.3.0+ds-3","7.3.0+ds-3~bpo12+1","7.3.1+ds-1","7.3.2+ds-1","7.3.2+ds-1~bpo12+1","7.3.5+ds-1~bpo12+1"]},{"source":"osv","ecosystem":"Debian:12","package":"redis","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["5:7.0.11-1","5:7.0.11-1+deb12u1","5:7.0.12-1","5:7.0.12-2","5:7.0.13-1","5:7.0.13-2","5:7.0.14-1","5:7.0.14-2","5:7.0.15-1","5:7.0.15-1~deb12u1","5:7.0.15-1~deb12u2","5:7.0.15-1~deb12u3","5:7.0.15-1~deb12u4","5:7.0.15-1~deb12u5","5:7.0.15-1~deb12u6","5:7.0.15-1~deb12u7","5:7.0.15-1~deb12u8","5:7.0.15-1~deb12u9","5:7.0.15-2","5:7.0.15-3","5:7.0.15-3.1","5:7.2-rc2-1","5:7.2-rc3-1","5:7.2.0-1","5:7.2.0-2","5:7.2.1-1","5:7.2.1-2","5:7.2.2-1","5:7.2.2-2","5:7.2.3-1","5:7.2.4-1","5:7.2.5-1","5:7.2.5-2","5:7.2.5-3","5:7.2~rc1-1","5:8.0.0-1","5:8.0.0-2","5:8.0.2-2","5:8.0.2-3","5:8.0.4-1","5:8.0.5-1","5:8.0.6-1","5:8.0.6-2","5:8.4.0-1","5:8.6.1-1","5:8.6.2-1","5:8.6.3-1"]},{"source":"osv","ecosystem":"Debian:13","package":"redis","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["5:8.0.2-3","5:8.0.2-3+deb13u1","5:8.0.2-3+deb13u2","5:8.0.4-1","5:8.0.5-1","5:8.0.6-1","5:8.0.6-2","5:8.4.0-1","5:8.6.1-1","5:8.6.2-1","5:8.6.3-1"]},{"source":"osv","ecosystem":"Debian:14","package":"redis","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["5:8.0.2-3","5:8.0.4-1","5:8.0.5-1","5:8.0.6-1","5:8.0.6-2","5:8.4.0-1","5:8.6.1-1","5:8.6.2-1","5:8.6.3-1"]},{"source":"osv","ecosystem":"Debian:13","package":"valkey","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8.1.1+dfsg1-2"}]}]},{"source":"osv","ecosystem":"Debian:14","package":"valkey","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8.1.1+dfsg1-2"}]}]},{"source":"osv","ecosystem":"openEuler:22.03-LTS-SP3","package":"redis","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.2.9-2.oe2203sp3"}]}],"bundled":2},{"source":"osv","ecosystem":"openEuler:22.03-LTS-SP4","package":"redis","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.2.9-2.oe2203sp4"}]}],"bundled":2},{"source":"osv","ecosystem":"openEuler:24.03-LTS","package":"redis","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.2.9-2.oe2403sp1"}]}],"bundled":2},{"source":"osv","ecosystem":"openEuler:24.03-LTS-SP1","package":"redis","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.2.9-2.oe2403sp1"}]}],"bundled":2},{"source":"osv","ecosystem":"openEuler:20.03-LTS-SP4","package":"redis","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.2.9-2.oe2003sp4"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Server Applications 15 SP7","package":"valkey","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8.0.2-150700.3.5.1"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Server Applications 15 SP6","package":"valkey","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8.0.2-150600.13.11.1"}]}],"bundled":2},{"source":"osv","ecosystem":"openSUSE:Leap 15.6","package":"valkey","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8.0.2-150600.13.11.1"}]}],"bundled":2},{"source":"osv","ecosystem":"Ubuntu:Pro:14.04:LTS","package":"redis","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["2:2.6.13-1","2:2.6.16-3","2:2.8.0-1","2:2.8.2-1","2:2.8.4-2","2:2.8.4-2ubuntu0.2","2:2.8.4-2ubuntu0.2+esm1","2:2.8.4-2ubuntu0.2+esm2","2:2.8.4-2ubuntu0.2+esm3","2:2.8.4-2ubuntu0.2+esm4","2:2.8.4-2ubuntu0.2+esm5"]},{"source":"osv","ecosystem":"Ubuntu:Pro:16.04:LTS","package":"redis","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["2:3.0.3-3","2:3.0.5-1","2:3.0.5-2","2:3.0.5-3","2:3.0.5-4","2:3.0.6-1","2:3.0.6-1ubuntu0.2","2:3.0.6-1ubuntu0.3","2:3.0.6-1ubuntu0.4","2:3.0.6-1ubuntu0.4+esm1","2:3.0.6-1ubuntu0.4+esm2","2:3.0.6-1ubuntu0.4+esm3","2:3.0.6-1ubuntu0.4+esm4","2:3.0.6-1ubuntu0.4+esm5"]},{"source":"osv","ecosystem":"Ubuntu:Pro:18.04:LTS","package":"redis","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["4:4.0.1-7","4:4.0.2-6","4:4.0.2-9","5:4.0.5-1","5:4.0.6-1","5:4.0.6-2","5:4.0.7-1","5:4.0.8-1","5:4.0.8-2","5:4.0.9-1","5:4.0.9-1ubuntu0.1","5:4.0.9-1ubuntu0.2","5:4.0.9-1ubuntu0.2+esm2","5:4.0.9-1ubuntu0.2+esm3","5:4.0.9-1ubuntu0.2+esm4","5:4.0.9-1ubuntu0.2+esm5","5:4.0.9-1ubuntu0.2+esm6","5:4.0.9-1ubuntu0.2+esm7"]},{"source":"osv","ecosystem":"Ubuntu:Pro:20.04:LTS","package":"redis","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["5:5.0.5-2build1","5:5.0.6-1","5:5.0.7-1","5:5.0.7-2","5:5.0.7-2ubuntu0.1~esm1","5:5.0.7-2ubuntu0.1","5:5.0.7-2ubuntu0.1+esm1","5:5.0.7-2ubuntu0.1+esm2","5:5.0.7-2ubuntu0.1+esm3","5:5.0.7-2ubuntu0.1+esm4"]},{"source":"osv","ecosystem":"Ubuntu:Pro:22.04:LTS","package":"redis","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["5:6.0.15-1","5:6.0.16-1","5:6.0.16-1build1","5:6.0.16-1ubuntu1","5:6.0.16-1ubuntu1+esm1","5:6.0.16-1ubuntu1+esm2","5:6.0.16-1ubuntu1.1","5:6.0.16-1ubuntu1.1+esm1","5:6.0.16-1ubuntu1.2","5:6.0.16-1ubuntu1.2+esm1"]},{"source":"osv","ecosystem":"Ubuntu:24.04:LTS","package":"redis","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["5:7.0.12-1","5:7.0.14-1","5:7.0.14-2","5:7.0.15-1","5:7.0.15-1build1","5:7.0.15-1build2","5:7.0.15-1ubuntu0.24.04.1","5:7.0.15-1ubuntu0.24.04.2","5:7.0.15-1ubuntu0.24.04.3","5:7.0.15-1ubuntu0.24.04.4","5:7.0.15-1ubuntu0.24.04.5"]},{"source":"osv","ecosystem":"Ubuntu:24.04:LTS","package":"valkey","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.2.11+dfsg1-0ubuntu0.2"}]}],"versions":["7.2.5+dfsg1-2ubuntu4~24.04.1","7.2.7+dfsg1-0ubuntu0.24.04.1","7.2.8+dfsg1-0ubuntu0.24.04.1","7.2.8+dfsg1-0ubuntu0.24.04.2","7.2.8+dfsg1-0ubuntu0.24.04.3","7.2.10+dfsg1-0ubuntu0.1","7.2.11+dfsg1-0ubuntu0.1"]},{"source":"osv","ecosystem":"Ubuntu:25.10","package":"redict","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["7.3.2+ds-1","7.3.5+ds-1","7.3.5+ds-1ubuntu0.1","7.3.5+ds-1ubuntu0.2"]},{"source":"osv","ecosystem":"Ubuntu:25.10","package":"redis","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["5:7.0.15-3","5:7.0.15-3.1","5:8.0.2-3","5:8.0.2-3build1","5:8.0.2-3ubuntu0.25.10.1"]},{"source":"osv","ecosystem":"Ubuntu:25.10","package":"valkey","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8.1.4+dfsg1-0ubuntu0.2"}]}],"versions":["8.0.2+dfsg1-1ubuntu1","8.1.1+dfsg1-2ubuntu1","8.1.3+dfsg1-0ubuntu1","8.1.3+dfsg1-0ubuntu2","8.1.4+dfsg1-0ubuntu0.1"]},{"source":"osv","ecosystem":"Ubuntu:26.10","package":"redict","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["7.3.6+ds-1","7.3.6+ds-2","7.3.6+ds-2build1"]},{"source":"osv","ecosystem":"Ubuntu:26.10","package":"redis","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["5:8.0.5-1","5:8.0.6-2","5:8.0.6-2build1","5:8.0.6-3"]},{"source":"osv","ecosystem":"Ubuntu:26.04:LTS","package":"redict","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["7.3.5+ds-1","7.3.5+ds-1ubuntu0.1","7.3.6+ds-1"]},{"source":"osv","ecosystem":"Ubuntu:26.04:LTS","package":"redis","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["5:8.0.2-3build1","5:8.0.2-3ubuntu0.25.10.1","5:8.0.5-1","5:8.0.5-1ubuntu0.1"]},{"source":"osv","ecosystem":"Ubuntu:24.04:LTS","package":"valkey","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.2.11+dfsg1-0ubuntu0.2"}]}],"versions":["7.2.5+dfsg1-2ubuntu4~24.04.1","7.2.7+dfsg1-0ubuntu0.24.04.1","7.2.8+dfsg1-0ubuntu0.24.04.1","7.2.8+dfsg1-0ubuntu0.24.04.2","7.2.8+dfsg1-0ubuntu0.24.04.3","7.2.10+dfsg1-0ubuntu0.1","7.2.11+dfsg1-0ubuntu0.1"],"bundled":5},{"source":"osv","ecosystem":"Ubuntu:25.10","package":"valkey","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8.1.4+dfsg1-0ubuntu0.2"}]}],"versions":["8.0.2+dfsg1-1ubuntu1","8.1.1+dfsg1-2ubuntu1","8.1.3+dfsg1-0ubuntu1","8.1.3+dfsg1-0ubuntu2","8.1.4+dfsg1-0ubuntu0.1"],"bundled":5},{"source":"osv","ecosystem":"openSUSE:Tumbleweed","package":"valkey","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8.1.2-1.1"}]}],"bundled":2}],"products":[{"vendor":"valkey","product":"valkey"},{"vendor":"valkey-io","product":"valkey"}],"references":[{"url":"https://github.com/valkey-io/valkey/blob/daea05b1e26db29bfd1c033e27f9d519a2f8ccbb/src/networking.c#L886","tags":["web","report"]},{"url":"https://github.com/valkey-io/valkey/pull/2101","tags":["web","fix","report"]},{"url":"https://github.com/redis/redis/blob/994bc96bb1744cb153392fc96bdba43eae56e17f/src/networking.c#L783","tags":["web","report"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2025-49112","tags":["web","advisory"]},{"url":"https://github.com/advisories/GHSA-xhp4-6g9v-4xvj"},{"url":"https://docs.bell-sw.com/security/cves/CVE-2025-49112","tags":["advisory"]},{"url":"https://github.com/redis/redis/issues/14199","tags":["web"]},{"url":"https://github.com/CVEProject/cvelistV5/tree/main/cves/2025/49xxx/CVE-2025-49112.json","tags":["advisory"]},{"url":"https://security-tracker.debian.org/tracker/CVE-2025-49112","tags":["advisory"]},{"url":"https://www.openeuler.org/zh/security/security-bulletins/detail/?id=openEuler-SA-2025-1630","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2025-27151","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2025/suse-su-202501942-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1241708","tags":["report"]},{"url":"https://bugzilla.suse.com/1243061","tags":["report"]},{"url":"https://bugzilla.suse.com/1243804","tags":["report"]},{"url":"https://bugzilla.suse.com/1243913","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2025-21605","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-27151","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-49112","tags":["web"]},{"url":"https://www.suse.com/support/update/announcement/2025/suse-su-202502231-1/","tags":["advisory"]},{"url":"https://ubuntu.com/security/CVE-2025-49112","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2025-49112","tags":["report"]},{"url":"https://ubuntu.com/security/notices/USN-7893-1","tags":["advisory"]},{"url":"https://ubuntu.com/security/CVE-2025-46817","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2025-46818","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2025-46819","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2025-49844","tags":["report"]},{"url":"","tags":["advisory"]}],"sources":{"cve":[{"id":"CVE-2025-49112","description":"setDeferredReply in networking.c in Valkey through 8.1.1 has an integer underflow for prev-\u003esize - prev-\u003eused.","status":"published","published":"2025-06-02T00:00:00Z","modified":"2025-06-02T16:58:20.615Z","cvss":[{"version":"3.1","score":3.1,"vector":"CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L","level":"low","assessor":"cna"}],"cwes":["CWE-191"],"updated_at":"2026-11-02T14:32:24.825718Z"}],"euvd":[{"id":"EUVD-2025-16611","description":"setDeferredReply in networking.c in Valkey through 8.1.1 has an integer underflow for prev-\u003esize - prev-\u003eused.","status":"published","published":"2025-06-02T00:00:00Z","modified":"2025-06-02T16:58:20Z","cvss":[{"version":"3.1","score":3.1,"vector":"CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L","level":"low"}],"updated_at":"2026-11-02T20:32:32.485503Z"}],"ghsa":[{"id":"GHSA-xhp4-6g9v-4xvj","title":"setDeferredReply in networking.c in Valkey through 8.1.1 has an integer underflow for prev-\u003esize ...","description":"setDeferredReply in networking.c in Valkey through 8.1.1 has an integer underflow for prev-\u003esize - prev-\u003eused.","status":"published","published":"2025-06-02T06:30:32Z","modified":"2025-06-02T06:30:37Z","cvss":[{"version":"3.1","score":3.1,"vector":"CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L","level":"low"}],"cwes":["CWE-191"],"updated_at":"2026-11-02T15:02:32.017383Z"}],"nvd":[{"id":"CVE-2025-49112","description":"setDeferredReply in networking.c in Valkey through 8.1.1 has an integer underflow for prev-\u003esize - prev-\u003eused.","status":"published","published":"2025-06-02T05:15:21.277Z","modified":"2026-06-17T09:30:46.913Z","cvss":[{"version":"3.1","score":3.1,"vector":"CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L","level":"low","assessor":"secondary"}],"cwes":["CWE-191"],"updated_at":"2026-11-02T14:11:10.143444Z"}],"osv":[{"id":"BELL-CVE-2025-49112","status":"published","published":"2025-06-06T06:00:56.378758Z","modified":"2026-03-06T09:55:27.431682Z","cvss":[{"version":"3.1","score":3.1,"vector":"CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L","level":"low"}],"updated_at":"2026-11-02T15:28:22.495824Z"},{"id":"CVE-2025-49112","description":"setDeferredReply in networking.c in Valkey through 8.1.1 has an integer underflow for prev-\u003esize - prev-\u003eused.","status":"published","published":"2025-06-02T00:00:00Z","modified":"2026-10-28T02:30:53.105324437Z","cvss":[{"version":"3.1","score":3.1,"vector":"CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L","level":"low"}],"cwes":["CWE-191"],"updated_at":"2026-11-02T15:44:50.037003Z"},{"id":"DEBIAN-CVE-2025-49112","description":"setDeferredReply in networking.c in Valkey through 8.1.1 has an integer underflow for prev-\u003esize - prev-\u003eused.","status":"published","published":"2025-06-02T05:15:21.277Z","modified":"2026-09-01T20:05:53.441239176Z","cvss":[{"version":"3.1","score":3.1,"vector":"CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L","level":"low"}],"updated_at":"2026-11-02T15:45:47.378563Z"},{"id":"OESA-2025-1630","title":"redis security update","description":"Redis is an advanced key-value store. It is often referred to as a dattructure server since keys can contain strings, hashes ,lists, sets anorted sets.\r\n\r\nSecurity Fix(es):\n\nRedis is an open source, in-memory database that persists on disk. In versions starting from 7.0.0 to before 8.0.2, a stack-based buffer overflow exists in redis-check-aof due to the use of memcpy with strlen(filepath) when copying a user-supplied file path into a fixed-size stack buffer. This allows an attacker to overflow the stack and potentially achieve code execution. This issue has been patched in version 8.0.2.(CVE-2025-27151)\n\nsetDeferredReply in networking.c in Valkey through 8.1.1 has an integer underflow for prev-\u0026gt;size - prev-\u0026gt;used.(CVE-2025-49112)","status":"published","published":"2025-06-13T11:08:43Z","modified":"2026-08-18T01:18:51.700414572Z","cvss":[{"version":"3.1","score":8.4,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:52:42.714349Z"},{"id":"UBUNTU-CVE-2025-49112","description":"setDeferredReply in networking.c in Valkey through 8.1.1 has an integer underflow for prev-\u003esize - prev-\u003eused.","status":"published","published":"2025-06-02T05:15:00Z","modified":"2026-10-17T12:58:35.980359434Z","cvss":[{"version":"3.1","score":3.1,"vector":"CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L","level":"low"}],"updated_at":"2026-11-02T16:55:50.31802Z"},{"id":"AZL-62243","title":"CVE-2025-49112 affecting package valkey for versions less than 8.0.3-3","description":"setDeferredReply in networking.c in Valkey through 8.1.1 has an integer underflow for prev-\u003esize - prev-\u003eused.","status":"published","published":"2025-06-02T05:15:21Z","modified":"2026-11-05T05:40:51Z","updated_at":"2026-11-05T16:41:21.518778Z"},{"id":"BIT-keydb-2025-49112","description":"setDeferredReply in networking.c in Valkey through 8.1.1 has an integer underflow for prev-\u003esize - prev-\u003eused.","status":"published","published":"2025-10-16T09:12:49.854Z","modified":"2025-10-16T09:57:32.631726Z","updated_at":"2026-11-02T15:28:32.162822Z"},{"id":"BIT-redis-2025-49112","description":"setDeferredReply in networking.c in Valkey through 8.1.1 has an integer underflow for prev-\u003esize - prev-\u003eused.","status":"published","published":"2025-10-16T09:18:49.574Z","modified":"2025-10-16T09:57:32.631726Z","updated_at":"2026-11-02T15:28:35.111822Z"},{"id":"BIT-valkey-2025-49112","description":"setDeferredReply in networking.c in Valkey through 8.1.1 has an integer underflow for prev-\u003esize - prev-\u003eused.","status":"published","published":"2025-10-16T09:19:52.847Z","modified":"2026-05-08T07:51:13.939923Z","updated_at":"2026-11-02T15:28:36.104787Z"},{"id":"openSUSE-SU-2025:15306-1","title":"valkey-8.1.2-1.1 on GA media","description":"These are all security issues fixed in the valkey-8.1.2-1.1 package on the GA media of openSUSE Tumbleweed.","status":"published","published":"2025-07-03T00:00:00Z","modified":"2026-03-23T04:53:37.655436Z","updated_at":"2026-11-02T16:58:37.810934Z"},{"id":"SUSE-SU-2025:01942-1","title":"Security update for valkey","description":"This update for valkey fixes the following issues:\n\n- CVE-2025-27151: Absence of filename size check may cause a stack\n  overflow (bsc#1243804)\n- CVE-2025-49112: setDeferredReply integer underflow (bsc#1243913)\n- CVE-2025-21605: Output buffer denial of service (bsc#1241708)\n","status":"published","published":"2025-06-13T08:33:49Z","modified":"2026-03-23T04:48:30.050805Z","updated_at":"2026-11-02T15:53:56.647031Z"},{"id":"SUSE-SU-2025:02231-1","title":"Security update for valkey","description":"This update for valkey fixes the following issues:\n\n- CVE-2025-27151: Absence of filename size check may cause a stack overflow (bsc#1243804).\n- CVE-2025-49112: setDeferredReply integer underflow (bsc#1243913).\n","status":"published","published":"2025-07-07T07:50:14Z","modified":"2026-02-04T04:02:31.041116Z","updated_at":"2026-11-02T15:53:56.647031Z"},{"id":"USN-7893-1","title":"valkey vulnerabilities","description":"Benny Isaacs, Nir Brakha, and Sagi Tzadik discovered that Valkey incorrectly\nhandled memory when running Lua scripts. An authenticated attacker could\nuse this vulnerability to trigger a use-after-free condition, and\npotentially achieve remote code execution on the Valkey server.\n(CVE-2025-49844)\n\nIt was discovered that Valkey incorrectly handled memory when running Lua\nscripts. An authenticated attacker could use this vulnerability to trigger\na integer overflow condition, and potentially achieve remote code execution\non the Valkey server. (CVE-2025-46817)\n\nIt was discovered that Valkey incorrectly handled Lua objects. An\nauthenticated attacker could possibly use this issue to escalate their\nprivileges. (CVE-2025-46818)\n\nIt was discovered that Valkey incorrectly handled memory when running Lua\nscripts. An authenticated attacker could use this vulnerability to read\nout-of-bounds memory, causing a denial of service or possibly obtaining\nsensitive information. (CVE-2025-46819)\n\nIt was discovered that Valkey incorrectly handled memory in some\ncalculations. An attacker could possibly use this issue to cause a denial\nof service. (CVE-2025-49112)","status":"published","published":"2025-11-26T13:51:48Z","modified":"2026-04-27T18:28:50.150768Z","updated_at":"2026-11-02T16:58:21.91885Z"}]}}