๐Ÿ” CVE Alert

CVE-2026-46752

UNKNOWN 0.0

Apache Kvrocks: Stack buffer overflow in Lua bit.tohex()

CVSS Score
0.0
EPSS Score
0.0%
EPSS Percentile
0th

Redis Lua HEAP overflow in cjson library vulnerability in Apache Kvrocks. This issue affects Apache Kvrocks: from 2.0.4 through 2.15.0. Users are recommended to upgrade to version 2.16.0, which fixes the issue.

CWE CWE-122
Vendor apache software foundation
Product apache kvrocks
Published Jun 25, 2026
Last Updated Jun 25, 2026
Stay Ahead of the Next One

Get instant alerts for apache software foundation apache kvrocks

Be the first to know when new unknown vulnerabilities affecting apache software foundation apache kvrocks are published โ€” delivered to Slack, Telegram or Discord.

Get Free Alerts โ†’ Free ยท No credit card ยท 60 sec setup

Affected Versions

Apache Software Foundation / Apache Kvrocks
2.0.4 โ‰ค 2.15.0

References

NVD โ†— CVE.org โ†— EPSS Data โ†—
lists.apache.org: https://lists.apache.org/thread/11sr3bkkhkk0q01odgw6ddsj7fzo31pt openwall.com: http://www.openwall.com/lists/oss-security/2026/06/25/4

Credits

๐Ÿ” Jincheng Yang