VYPR
← All advisories
High severity7.0OSV Advisory· Published Jan 8, 2025· Updated Apr 15, 2026

CVE-2024-51480

CVE-2024-51480

Description

RedisTimeSeries is a time-series database (TSDB) module for Redis, by Redis. Executing one of these commands TS.QUERYINDEX, TS.MGET, TS.MRAGE, TS.MREVRANGE by an authenticated user, using specially crafted command arguments may cause an integer overflow, a subsequent heap overflow, and potentially lead to remote code execution. This vulnerability is fixed in 1.6.20, 1.8.15, 1.10.15, and 1.12.3.

Affected products

2
  • RedisTimeSeries/RedistimeseriesOSV2 versions
    v1.10.0, v1.10.1, v1.10.10, …+ 1 more
    • (no CPE)range: v1.10.0, v1.10.1, v1.10.10, …
    • (no CPE)range: <1.6.20 || >=1.8.0 <1.8.15 || >=1.10.0 <1.10.15 || >=1.12.0 <1.12.3

Patches

Vulnerability mechanics

References

1

News mentions

0

No linked articles in our index yet.