CVE-2021-41099

score

<0.1

cvss

7.5

epss

3.6%

published

2021-10-04

kev added

—

first seen

2026-10-21

Redis versions prior to 6.2.6, 6.0.16, and 5.0.14 contain an integer overflow caused by setting a very large proto-max-bulk-len value, letting attackers cause heap corruption, denial of service, or remote code execution, exploit requires crafting specific network payloads or commands.