CVE-2022-35951

score

<0.1

cvss

7.0

epss

3.9%

published

2022-09-23

kev added

—

first seen

2026-10-21

Redis versions 7.0.0 to less than 7.0.5 contain an integer overflow caused by executing an AUTOCLAIM command with a crafted COUNT argument on a stream key in a specific state, letting attackers potentially cause a heap overflow and execute arbitrary code, exploit requires sending a specially crafted command.