CVE-2025-27151

Redis is an open source, in-memory database that persists on disk. In versions starting from 7.0.0 to before 8.0.2, a stack-based buffer overflow exists in redis-check-aof due to the use of memcpy with strlen(filepath) when copying a user-supplied file path into a fixed-size stack buffer. This allows an attacker to overflow the stack and potentially achieve code execution. This issue has been patched in version 8.0.2.

Database specific

{
    "cna_assigner": "GitHub_M",
    "cwe_ids": [
        "CWE-121",
        "CWE-20"
    ],
    "osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2025/27xxx/CVE-2025-27151.json"
}

References

Affected packages

Git / github.com/redis/redis

Affected ranges

Type

GIT

Repo

https://github.com/redis/redis

Events

Introduced

d375595d5e3ae2e5c29e6c00a2dc3d60578fd9fc

Fixed

080b99d9827eac9e8a6639922d64b8a8cc5c930c

Introduced

c9d29f6a918c335bc1778d9f68e521c1bbb36a0f

Fixed

08961e16dbfff61ad4f6ad482ae2e455e7085761

Introduced

e91a340e241cf0abe3c6a0c254214fbe4aa1d95f

Fixed

994bc96bb1744cb153392fc96bdba43eae56e17f

Fixed

643b5db235cb82508e72f11c7b4bbfc7dc39be56

Database specific

{
    "source": [
        "CPE_RANGE",
        "REFERENCES"
    ],
    "extracted_events": [
        {
            "introduced": "7.0.0"
        },
        {
            "fixed": "7.2.9"
        },
        {
            "introduced": "7.4.0"
        },
        {
            "fixed": "7.4.4"
        },
        {
            "introduced": "8.0.0"
        },
        {
            "fixed": "8.0.2"
        }
    ],
    "cpe": "cpe:2.3:a:redis:redis:*:*:*:*:*:*:*:*"
}

Affected versions

7.*

7.4.0

7.4.1

7.4.2

7.4.3

8.*

8.0.0

8.0.1

8.0.1-int

Database specific

source

"https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2025-27151.json"

vanir_signatures_modified

"2026-06-18T10:30:51Z"

vanir_signatures

[
    {
        "source": "https://github.com/redis/redis/commit/643b5db235cb82508e72f11c7b4bbfc7dc39be56",
        "target": {
            "file": "src/redis-check-aof.c"
        },
        "deprecated": false,
        "id": "CVE-2025-27151-3559ed69",
        "digest": {
            "line_hashes": [
                "204361133470043369422735108006951014492",
                "266395016474126643708905170881553865497",
                "291104153020075789859589203955995153601"
            ],
            "threshold": 0.9
        },
        "signature_type": "Line",
        "signature_version": "v1"
    },
    {
        "source": "https://github.com/redis/redis/commit/643b5db235cb82508e72f11c7b4bbfc7dc39be56",
        "target": {
            "function": "redis_check_aof_main",
            "file": "src/redis-check-aof.c"
        },
        "deprecated": false,
        "id": "CVE-2025-27151-bc576423",
        "digest": {
            "function_hash": "327466512985566197169610813840867666992",
            "length": 1359.0
        },
        "signature_type": "Function",
        "signature_version": "v1"
    }
]