Lucene search
+L

6 matches found

RedhatCVE
RedhatCVE
added 2026/08/24 2:42 p.m.3 views

CVE-2026-63639

A flaw was found in Valkey, a distributed key-value database. A remote attacker could exploit a use-after-free vulnerability in the RESTORE command. This occurs when a malformed data stream is processed during stream deserialization, causing a shared resource to be improperly managed. If...

8.8CVSS5.8AI score0.01171EPSS
SaveExploits0References15
OSV
OSV
added 2026/08/24 5:53 a.m.4 views

BIT-VALKEY-2026-63639 Valkey: UAF in stream deserialization may lead to remote code execution

Valkey is a distributed key-value database. Prior to 7.2.14, 8.0.10, 8.1.9, 9.0.5, and 9.1.1, Valkey's RESTORE command accepts a malformed RDB stream payload that assigns one Pending Entry List NACK to multiple consumers during stream consumer-group deserialization, causing a use-after-free when...

8.8CVSS6AI score0.01171EPSS
SaveExploits0References13
OSV
OSV
added 2026/08/18 3:16 p.m.5 views

DEBIAN-CVE-2026-63639

Valkey is a distributed key-value database. Prior to 7.2.14, 8.0.10, 8.1.9, 9.0.5, and 9.1.1, Valkey's RESTORE command accepts a malformed RDB stream payload that assigns one Pending Entry List NACK to multiple consumers during stream consumer-group deserialization, causing a use-after-free when...

8.8CVSS6AI score0.01171EPSS
SaveExploits0References1
OSV
OSV
added 2026/08/18 2:23 p.m.10 views

CVE-2026-63639 Valkey: UAF in stream deserialization may lead to remote code execution

Valkey is a distributed key-value database. Prior to 7.2.14, 8.0.10, 8.1.9, 9.0.5, and 9.1.1, Valkey's RESTORE command accepts a malformed RDB stream payload that assigns one Pending Entry List NACK to multiple consumers during stream consumer-group deserialization, causing a use-after-free when...

8.8CVSS6AI score
SaveExploits0References14
Cvelist
Cvelist
added 2026/08/18 2:23 p.m.30 views

CVE-2026-63639 Valkey: UAF in stream deserialization may lead to remote code execution

Valkey is a distributed key-value database. Prior to 7.2.14, 8.0.10, 8.1.9, 9.0.5, and 9.1.1, Valkey's RESTORE command accepts a malformed RDB stream payload that assigns one Pending Entry List NACK to multiple consumers during stream consumer-group deserialization, causing a use-after-free when...

8.8CVSS0.01171EPSS
SaveExploits0References12
CVE
CVE
added 2021/06/22 9:25 p.m.85 views

CVE-2021-34394

CVE-2021-34394 affects NVIDIA Trusty (NVIDIA OTE protocol) used in Jetson devices. The issue is an incorrect message stream deserialization in the OTE protocol that can allow a local attacker to trigger a buffer overflow, potentially leading to information disclosure and data modification. NVIDIA...

6.7CVSS6.5AI score0.00264EPSS
SaveExploits0References1Affected Software1
Rows per page
Query Builder