10

CVE-2025-49844: lfprojects valkey Use After Free

CVSS: 10.0v3.1CriticalModified
AliasesALPINE-CVE-2025-49844UBUNTU-CVE-2025-49844USN-7824-1
Published 03-10-2025Last modified 20-03-2026
Open JSON

Vulnerability summary

CVE-2025-49844 is a critical (CVSS 10.0) Use After Free vulnerability in lfprojects valkey. EPSS estimates a 82.29% chance of exploitation in the next 30 days, higher than 99.6% of scored vulnerabilities. 1 public exploit is recorded.

Overall risk
90/100
0100
Critical · default modelHow is this calculated?
CVSS score
10.0/10
010
Critical · v3.1 (CVE.org)
EPSS score
82.29%
0%100%
Critical · 0.00 pp in 30 days
KEVNot listedIn no KEV catalog
RansomwareNone recordedNo known use recorded
Public exploits1github

Advisory lineage

Upstream 0 · Downstream 32 · Related 16
DLA-4325-1DSA-6020-1DSA-6022-1MGASA-2025-0307OPENSUSE-SU-2025:15600-1OPENSUSE-SU-2025:15604-1

Timeline

  1. 03-10-2025
    PublishedVulnerability first disclosed.
  2. 20-03-2026
    Last modifiedVulnerability information updated.

Description

Redis is an open source, in-memory database that persists on disk. Versions 8.2.1 and below allow an authenticated user to use a specially crafted Lua script to manipulate the garbage collector, trigger a use-after-free and potentially lead to remote code execution. The problem exists in all versions of Redis with Lua scripting. This issue is fixed in version 8.2.2. To workaround this issue without patching the redis-server executable is to prevent users from executing Lua scripts. This can be done using ACL to restrict EVAL and EVALSHA commands.

CVSS metrics

6 scores · 6 sources · 1 version

EPSS trend

Probability

82.29%

Chance of exploitation in the next 30 days

Percentile

100%

Versus all other CVEs

30-day change

0.00 pp

From 82.29% on 19-09-2026

19-09-202619-10-2026
EPSS score
82.29%

Known exploited

Compare KEV catalogs

Not in any of the 3 tracked catalogs.

Public exploits

1 found
  • githubUnverified

    Redis Cve 2025 49844

    Maturity: poc

Weaknesses

CWE · root cause

Affected systems

Chainguard5 products
  • py3-redisAll versions (No fix recorded)
  • py3.10-redisAll versions (No fix recorded)
  • py3.11-redisAll versions (No fix recorded)
  • py3.12-redisAll versions (No fix recorded)
  • py3.13-redisAll versions (No fix recorded)
Ubuntu5 products
  • lua50All versions (No fix recorded)
  • lua5.1All versions (No fix recorded) | < 5.1.5-8.1ubuntu0.20.04.1~esm1 | < 5.1.5-8.1ubuntu0.22.04.1~esm1
  • redict< 7.3.5+ds-1ubuntu0.1
  • redis< 5:6.0.16-1ubuntu1.1 | < 2:2.8.4-2ubuntu0.2+esm5 | < 2:3.0.6-1ubuntu0.4+esm4 | < 5:4.0.9-1ubuntu0.2+esm6 | < 5:5.0.7-2ubuntu0.1+esm4 | < 5:7.0.15-1ubuntu0.24.04.2 | < 5:8.0.2-3ubuntu0.25.10.1
  • valkey< 7.2.11+dfsg1-0ubuntu0.2 | < 8.1.4+dfsg1-0ubuntu0.2
Debian3 products
  • redict< 7.3.6+ds-1
  • redis< 5:7.0.15-1~deb12u6 | < 5:8.0.2-3+deb13u1 | < 5:8.0.4-1
  • valkey< 8.1.1+dfsg1-3+deb13u1 | < 8.1.4+dfsg1-1
Alpine1 product
  • valkey≥ 8.0.0, < 7.2.11-r0 | ≥ 8.0.0, < 8.1.4-r0
Lfprojects1 product
  • valkey< 7.2.11 | ≥ 8.0.0, < 8.0.6 | ≥ 8.1.0, < 8.1.4
Redis1 product
  • redis< 8.2.2 | < 6.2.20 | ≥ 7.0, < 7.2.11 | ≥ 7.4.0, < 7.4.6 | ≥ 8.0.0, < 8.0.4 | ≥ 8.2.0, < 8.2.2

6 vendors · 16 products

References

18 links
Show all 18 references