CVE-2026-7827

FalkorDB versions prior to 4.18.4 are vulnerable to a stack-based buffer overflow in the _RdbLoadEntity function of the RDB graph decoders (located in src/serializers/decoders/*/decode_graph_entities.c). The root cause is an unbounded property count in a crafted RDB stream, where the count sizes ...

CVE-2026-7827 Stack-based buffer overflow in FalkorDB _RdbLoadEntity via unbounded property count in crafted RDB

A stack-based buffer overflow in the RdbLoadEntity function of the RDB graph decoders src/serializers/decoders//decodegraphentities.c in FalkorDB before 4.18.4 allows a remote attacker who can issue Redis replication commands for example, against an instance with no password configured to cause a...