CVE-2026-72568

Redis 8.8.1 is affected by a heap out-of-bounds read in the Redis Cluster Bus PING message handler. The getPingExtLength() function does not validate extension length fields against the remaining buffer, allowing an attacker-controlled PING packet sent to the Cluster Bus port to cause the parser ...