Main
Vulnerability Database
Exploits
ID:12016 - Exploit for Out-of-bounds read in Redis - CVE-2025-46819
ID:12016 - Exploit for Out-of-bounds read in Redis - CVE-2025-46819
Published: October 8, 2025
Vulnerability identifier: #VU116640
Vulnerability risk: Medium
CVE-ID: CVE-2025-46819
CWE-ID: CWE-125
Exploitation vector: Remote access
Vulnerable software:
Redis
Redis
Link to public exploit:
Vulnerability description
The vulnerability allows a remote user to gain access to potentially sensitive information.
The vulnerability exists due to a boundary condition when processing Lua scripts. A remote user can trigger an out-of-bounds read error and read contents of memory on the system or perform a denial of service (DoS) attack.
Remediation
Install updates from vendor's website.