What’s Vulnerable › Vulnerabilities

CVE-2025-49112

• Severity: low (CVSS 3.1 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.2% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2025-06-02 · updated 2026-06-17
• Weakness: CWE-191

Description

setDeferredReply in networking.c in Valkey through 8.1.1 has an integer underflow for prev->size - prev->used.

Affected products

• Valkey: through 8.1.1

References

• https://github.com/redis/redis/blob/994bc96bb1744cb153392fc96bdba43eae56e17f/src/networking.c#L783
• https://github.com/valkey-io/valkey/blob/daea05b1e26db29bfd1c033e27f9d519a2f8ccbb/src/networking.c#L886
• https://github.com/valkey-io/valkey/pull/2101

Get alerted when CVE-2025-49112 or the next vulnerability affects your stack