Redis 8.6.3 Multiple CVEs Advisory: Uninitialized Memory Access Leading to RCE

Vulnerability Overview In Redis version 8.6.3, multiple security vulnerabilities exist, primarily involving uninitialized memory access and memory release issues after Lua usage, which may lead to remote code execution. Affected Scope CVE-2026-23479: Uninitialized memory access in the client stream may lead to remote code execution. CVE-2026-25243: Uninitialized memory access in the command may lead to remote code execution. CVE-2026-25631: Uninitialized memory access after Lua usage may lead to remote code execution. CVE-2026-25589: Uninitialized memory access in the command may lead to remote code execution (Time Series). CVE-2026-25589: Uninitialized memory access in the command may lead to remote code execution (Probabilistic). Remediation CVE-2026-23479: Fixed uninitialized memory access in the client stream. CVE-2026-25243: Fixed uninitialized memory access in the command. CVE-2026-25631: Fixed uninitialized memory access after Lua usage. CVE-2026-25589: Fixed uninitialized memory access in the command (Time Series and Probabilistic). Other Fixes SUBSCRIBE, PSUBSCRIBE, SSUBSCRIBE: Fixed crashes caused by OOM (RED-167788). CONFIG SET: Fixed an issue allowing invalid characters (RED-167787). SCRIPT DEBUG: Fixed potential crashes in scripts (RED-175507). VAOD: Fixed crashes or buffer overflows on large values (RED-170921). VSET: Fixed crashes on large allocations (MOD-12678). Potential Crashes: Fixed potential crashes during disconnection and TLS failures (Time Series) (MOD-14850). RedisSearch/RedisSearch#8745: Fixed crashes when a large number of keys expire under TTL activity (MOD-14500). RedisSearch/RedisSearch#8848: Fixed memory growth of HNSW vector indexes under high churn workloads until shard restart (MOD-13761). RedisSearch/RedisSearch#8205, RedisSearch/RedisSearch#8259: Fixed returning zero results (MOD-12370, MOD-13884). RedisSearch/RedisSearch#9182: Fixed returning empty results (MOD-14778). RedisSearch/RedisSearch#8129, RedisSearch/RedisSearch#8140: Fixed incorrect shard total profile time reported by (MOD-13735, MOD-13181). RedisSearch/RedisSearch#9047: Fixed inconsistent output when profile values are missing (MOD-10560). RedisSearch/RedisSearch#8791: Fixed not locking, causing race conditions with concurrent index changes (MOD-14461). RedisSearch/RedisSearch#8382: Fixed crashes when indexing negative results (<0.0) (MOD-13904). RedisSearch/RedisSearch#8590: Fixed returning inconsistent results when multiple indexes share field aliases (MOD-14063). RedisSearch/RedisSearch#8660: Fixed behavior depending on the order of attributes in the expression (MOD-14065). RedisSearch/RedisSearch#8593: Fixed indexes where filters evaluated to non-matching document types (MOD-14064). RedisSearch/RedisSearch#8591: Fixed documents being inconsistently included or excluded during index path selection (MOD-13948). RedisSearch/RedisSearch#8589: Fixed notification handler loading the wrong key, causing index entries to expire after renaming (MOD-14328). RedisSearch/RedisSearch#9012: Fixed and notification handlers not being reflected in index expiration tracking (MOD-14800). RedisSearch/RedisSearch#9079: Fixed treating as literal terms instead of parsing them (MOD-10596). RedisSearch/RedisSearch#8462: Fixed replicas being in an inconsistent state when deleted on the primary replica (MOD-14066). RedisSearch/RedisSearch#9066: Fixed intermittent failures under concurrent hybrid query loads in (MOD-14732). RedisSearch/RedisSearch#8109, RedisSearch/RedisSearch#8149: Fixed module parameters being omitted during configuration registration, leading to unexposed or false-positive issues (RED-171841). RedisSearch/RedisSearch#9163: Fixed crashes during topology verification failures (e.g., certain nodes unreachable) (MOD-14475). RedisSearch/RedisSearch#8395: Fixed reporting "query requires unavailable slots" after shard restart or failure (MOD-13828). RedisSearch/RedisSearch#8451: Fixed style output not reporting zero index summary when no indexes exist (MOD-14079). RedisSearch/RedisSearch#9078: Fixed now rejecting schema definitions containing invalid option combinations (MOD-14655). RedisSearch/RedisSearch#8051, RedisSearch/RedisSearch#8112: Fixed crash diagnostics now including the of the index the failed thread was working on (MOD-7574). Metrics RedisSearch/RedisSearch#8210, RedisSearch/RedisSearch#8231: Added queue time tracking (MOD-13602). Assets All reactions: 2 reactions.

Goal Reached Thanks to every supporter — we hit 100%!

Redis 8.6.3 Multiple CVEs Advisory: Uninitialized Memory Access Leading to RCE

More from this source