RedisBloom vulnerabilities
We track 3 vulnerabilities in RedisBloom products. 3 are rated high or critical, and none are known to be exploited. The most recent was published on May 5, 2026.
Latest RedisBloom vulnerabilities
- 8.8 High severity
RedisBloom: Heap-based Buffer Overflow
RedisBloom is a probabilistic data structures module for Redis. In all versions of RedisBloom before 2.8.20, the module does not properly validate serialized values processed through the Redis RESTORE command. An authenticated attacker with permission to execu
- 8.8 High severity
RedisBloom: Integer Overflow or Wraparound
RedisBloom adds a set of probabilistic data structures to Redis. There is an integer overflow vulnerability in RedisBloom, which is a module used in Redis. The integer overflow vulnerability allows an attacker (a redis client which knows the password) to alloc
- 7.0 High severity
RedisBloom: Buffer Copy without Checking Size of Input
RedisBloom adds a set of probabilistic data structures to Redis. Starting in version 2.0.0 and prior to version 2.4.7 and 2.6.10, specially crafted `CF.LOADCHUNK` commands may be used by authenticated users to perform heap overflow, which may lead to remote co