Skip to content
Heist/ feed
Critical

Stack-based buffer overflow in FalkorDB _RdbLoadEntity via unbounded property count in crafted RDB

Type: advisorySource: Official CVE List1 source record

A stack-based buffer overflow in the _RdbLoadEntity function of the RDB graph decoders (src/serializers/decoders/*/decode_graph_entities.c) in FalkorDB before 4.18.4 allows a remote attacker who can issue Redis replication commands (for example, against an instance with no password configured) to cause a denial of service and possibly execute arbitrary code by supplying a crafted RDB stream with an attacker-controlled entity property count. The count sizes two variable-length arrays on the thread stack with no upper bound, and the decoder then fills them with attacker-supplied values.

Announced Source revision 1
Original source ↗

CVE-2026-7827

Primary source · Revision 1

Imported from structured advisory data. Source references identify upstream records or fields; verify affected versions and your deployed configuration.

Security context

Source reference: cve:CVE-2026-7827

FalkorDB

Source reference: /containers/cna/affected/0/product

Affected versions
Not stated in this record
Fixed versions
Not stated in this record
Prerequisites
Not stated in this record

Structured affected-version data

Original package identities and version rules from this source.

[
  {
    "cpes": [
      "cpe:2.3:a:falkordb:falkordb:*:*:*:*:*:*:*:*"
    ],
    "repo": "https://github.com/FalkorDB/FalkorDB",
    "vendor": "FalkorDB",
    "modules": [
      "RDB serializer / graph decoder"
    ],
    "product": "FalkorDB",
    "versions": [
      {
        "status": "affected",
        "version": "0",
        "lessThan": "4.18.4",
        "versionType": "semver"
      }
    ],
    "programFiles": [
      "src/serializers/decoders/current/v19/decode_graph_entities.c",
      "src/serializers/decoders/prev/v18/decode_graph_entities.c",
      "src/serializers/decoders/prev/v17/decode_graph_entities.c",
      "src/serializers/decoders/prev/v16/decode_graph_entities.c",
      "src/serializers/decoders/prev/v15/decode_graph_entities.c",
      "src/serializers/decoders/prev/v14/decode_graph_entities.c",
      "src/serializers/decoders/prev/v13/decode_graph_entities.c",
      "src/serializers/decoders/prev/v12/decode_graph_entities.c",
      "src/serializers/decoders/prev/v11/decode_graph_entities.c",
      "src/serializers/decoders/prev/v10/decode_graph_entities.c"
    ],
    "collectionURL": "https://github.com/FalkorDB/FalkorDB",
    "defaultStatus": "unaffected",
    "programRoutines": [
      {
        "name": "_RdbLoadEntity"
      }
    ]
  }
]
Related CVEs
CVE-2026-7827

Source reference: /cveMetadata/cveId

Publisher severity

critical

Source reference: /containers/cna/metrics

Event
#16378 · Revision 1
Added to Heist Feed
Publisher date
Read the original announcement