ID:12016 - Exploit for Out-of-bounds read in Redis - CVE-2025-46819

 
Main Vulnerability Database Exploits ID:12016 - Exploit for Out-of-bounds read in Redis - CVE-2025-46819

ID:12016 - Exploit for Out-of-bounds read in Redis - CVE-2025-46819

Published: October 8, 2025


Vulnerability identifier: #VU116640
Vulnerability risk: Medium
CVE-ID: CVE-2025-46819
CWE-ID: CWE-125
Exploitation vector: Remote access
Vulnerable software:
Redis

Link to public exploit:


Vulnerability description

The vulnerability allows a remote user to gain access to potentially sensitive information.

The vulnerability exists due to a boundary condition when processing Lua scripts. A remote user  can trigger an out-of-bounds read error and read contents of memory on the system or perform a denial of service (DoS) attack.


Remediation

Install updates from vendor's website.