CVE-2025-27151

score

<0.1

cvss

4.7

epss

1.0%

published

2025-05-29

kev added

—

first seen

2026-10-21

Redis 7.0.0 to < 8.0.2 contains a stack-based buffer overflow caused by improper use of memcpy with strlen(filepath) in redis-check-aof, letting attackers potentially execute arbitrary code remotely, exploit requires crafted file path input.