CVE-2021-32765— Integer Overflow to Buffer Overflow in Hiredis
Get alerts for future matching vulnerabilitiesLog in to subscribe
I. Basic Information for CVE-2021-32765
Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗ Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
Integer Overflow to Buffer Overflow in Hiredis
Source: NVD (National Vulnerability Database)
Vulnerability Description
Hiredis is a minimalistic C client library for the Redis database. In affected versions Hiredis is vulnurable to integer overflow if provided maliciously crafted or corrupted `RESP` `mult-bulk` protocol data. When parsing `multi-bulk` (array-like) replies, hiredis fails to check if `count * sizeof(redisReply*)` can be represented in `SIZE_MAX`. If it can not, and the `calloc()` call doesn't itself make this check, it would result in a short allocation and subsequent buffer overflow. Users of hiredis who are unable to update may set the [maxelements](https://github.com/redis/hiredis#reader-max-array-elements) context option to a value small enough that no overflow is possible.
Source: NVD (National Vulnerability Database)
CVSS Information
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Source: NVD (National Vulnerability Database)
Vulnerability Type
整数溢出或超界折返
Source: NVD (National Vulnerability Database)
Vulnerability Title
Hiredis 输入验证错误漏洞
Source: CNNVD (China National Vulnerability Database)
Vulnerability Description
Hiredis是一款用于Redis数据库的C语言客户端。 Hiredis 存在安全漏洞，该漏洞允许攻击者提供恶意制作或损坏的RESP、mult-bulk 协议数据，可导致整数溢出。
Source: CNNVD (China National Vulnerability Database)
CVSS Information
N/A
Source: CNNVD (China National Vulnerability Database)
Vulnerability Type
N/A
Source: CNNVD (China National Vulnerability Database)
Affected Products
II. Public POCs for CVE-2021-32765
| # | POC Description | Source Link | Shenlong Link |
|---|
AI-Generated POCPremium
No public POC found.
Login to generate AI POCIII. Intelligence Information for CVE-2021-32765
Please Login to view more intelligence information
Same Patch Batch · redis · 2021-10-04 · 9 CVEs total
| CVE-2021-32626 | 7.5 HIGH | Lua scripts can overflow the heap-based Lua stack in Redis |
| CVE-2021-32627 | 7.5 HIGH | Integer overflow issue with Streams in Redis |
| CVE-2021-32628 | 7.5 HIGH | Vulnerability in handling large ziplists |
| CVE-2021-32675 | 7.5 HIGH | DoS vulnerability in Redis |
| CVE-2021-32687 | 7.5 HIGH | Integer overflow issue with intsets in Redis |
| CVE-2021-32762 | 7.5 HIGH | Integer overflow that can lead to heap overflow in redis-cli, redis-sentinel on some platf |
| CVE-2021-41099 | 7.5 HIGH | Integer overflow issue with strings in Redis |
| CVE-2021-32672 | 5.3 MEDIUM | Vulnerability in Lua Debugger in Redis |
IV. Related Vulnerabilities
Same vendor: redis
- CVE-2026-25243
redis-server RESTORE invalid memory access may allow remote - CVE-2026-23631
redis-server Lua use-after-free may allow remote code execut - CVE-2026-23479
redis-server use-after-free in unblock client flow may allow - CVE-2025-62507
Redis: Bug in XACKDEL may lead to stack overflow and potenti - CVE-2025-49844
Redis Lua Use-After-Free may lead to remote code execution
Same weakness: CWE-190
- CVE-2026-6664
PgBouncer integer overflow in PgBouncer network packet parsi - CVE-2026-42199
Grid: Integer Overflow in Grid::expand_rows Leads to Safe-AP - CVE-2026-42217
OpenEXR: Shift exponent overflow in `readVariableLengthInteg - CVE-2026-41142
OpenEXR is Vulnerable to Integer overflow in ImageChannel::r - CVE-2026-42144
CImg Library: Integer overflow in PNM size check bypasses me
V. Comments for CVE-2021-32765
No comments yet