CVE-2021-29478

score

<0.1

cvss

7.5

epss

3.6%

published

2021-05-04

kev added

—

first seen

2026-10-21

Redis 6.2 before 6.2.3 contains an integer overflow caused by improper handling of set-max-intset-entries, letting attackers potentially corrupt the heap and achieve remote code execution, exploit requires unprivileged user to modify configuration.