CVE-2021-21309

score

<0.1

cvss

5.4

epss

4.8%

published

2021-02-26

kev added

—

first seen

2026-10-21

Redis 4.0 or newer on 32-bit systems contains an integer overflow bug in handling large bulk input sizes, which could be exploited to cause heap corruption and remote code execution, exploit requires authenticated user to modify configuration.