CVE-2026-107908

A heap-based out-of-bounds write in the BoltReadHandler function src/bolt/boltapi.c in FalkorDB before 4.20.0 allows a remote unauthenticated attacker to cause a denial of service and possibly execute arbitrary code by sending a Bolt RESET message with an attacker-chosen chunk size to the Bolt...

EUVD-2026-95485

A heap-based out-of-bounds write in the BoltReadHandler function src/bolt/boltapi.c in FalkorDB before 4.20.0 allows a remote unauthenticated attacker to cause a denial of service and possibly execute arbitrary code by sending a Bolt RESET message with an attacker-chosen chunk size to the Bolt...

PT-2026-108727

Name of the Vulnerable Software and Affected Versions FalkorDB versions prior to 4.20.0 Description A heap-based out-of-bounds write occurs in the BoltReadHandler function within src/bolt/bolt api.c. A remote unauthenticated attacker can trigger this by sending a Bolt RESET message with a custom...