CVE-2021-32761

score

<0.1

cvss

7.5

epss

30.1% ▼1.1

published

2021-07-21

kev added

—

first seen

2026-10-21

Redis versions 2.2 to before 5.0.13, 6.0.15, and 6.2.5 contain an out-of-bounds read and integer overflow caused by large `proto-max-bulk-len` values and crafted bit commands, letting attackers potentially corrupt heap, leak data, or execute remote code on 32-bit systems.