CVE-2020-35668

Technical details about CVE-2020-35668 are not publicly provided in the connected documents. Available descriptions only mention a NULL pointer dereference in RedisGraph 2.x up to 2.2.11. Monitor for updates.

CVE-2023-47004

CVE-2023-47004 affects RedisGraph (Redis module) versions 2.x through 2.12.8; a buffer overflow in the code path after valid authentication can lead to arbitrary code execution. The fixed version is 2.12.9. In practice, exploitability is indicated by the vulnerability allowing execution of arbitr...

CVE-2023-47003

RedisGraph v2.12.10 is affected by CVE-2023-47003 due to a flaw in DataBlock_ItemIsDeleted that can lead to arbitrary code execution and denial of service when presented with a crafted string. Public sources in connected documents consistently reference RedisGraph 2.12.10 and describe the underly...