CVE-2026-7826

CRITICAL 9.1

Heap out-of-bounds read in FalkorDB BufferSerializerIOv2_ReadBuffer via crafted RDB

CVSS Score

9.1

EPSS Score

0.0%

EPSS Percentile

0th

A heap-based out-of-bounds read in the BufferSerializerIOv2_ReadBuffer function (src/serializers/serializer_io.c) in FalkorDB before 4.18.4 allows a remote attacker who can issue Redis replication commands (for example, against an instance with no password configured) to cause a denial of service or disclose heap memory by supplying a crafted RDB stream whose sub-buffer length field exceeds the remaining buffer size. The only bounds check is an ASSERT(), which is compiled out in release builds, so memcpy() reads past the end of the heap allocation.

CWE	CWE-125
Vendor	falkordb
Product	falkordb
Published	Oct 9, 2026

Stay Ahead of the Next One

Get instant alerts for falkordb falkordb

Be the first to know when new critical vulnerabilities affecting falkordb falkordb are published — delivered to Slack, Telegram or Discord.

Get Free Alerts → Free · No credit card · 60 sec setup

CVSS v3 Breakdown

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H

Attack Vector

Attack Complexity

Privileges Required

User Interaction

Scope

Confidentiality

Integrity

Availability

Affected Versions

FalkorDB / FalkorDB

0 < 4.18.4

References

NVD ↗ CVE.org ↗ EPSS Data ↗

github.com: https://github.com/FalkorDB/FalkorDB/pull/1972 github.com: https://github.com/FalkorDB/FalkorDB/commit/55d986f45ecd5d80f7a9e5e138e8b0f96535b48c github.com: https://github.com/FalkorDB/FalkorDB/releases/tag/v4.18.4

Credits

Arjun Basnet from Securin