Fix heap overflow vulnerability in XAUTOCLAIM (CVE-2022-35951)
Executing an XAUTOCLAIM command on a stream key in a specific state, with a specially crafted COUNT argument may cause an integer overflow, a subsequent heap overflow, and potentially lead to remote code execution. The problem affects Redis versions 7.0.0 or newer.
Please register or sign in to comment