CVE-2025-27151

Redis is an open source, in-memory database that persists on disk. In versions starting from 7.0.0 to before 8.0.2, a stack-based buffer overflow exists in redis-check-aof due to the use of memcpy with strlen(filepath) when copying a user-supplied file path into a fixed-size stack buffer. This allows an attacker to overflow the stack and potentially achieve code execution. This issue has been patched in version 8.0.2.

Database specific

{
    "cna_assigner":  "GitHub_M",
    "cwe_ids":  [
        "CWE-121",
        "CWE-20"
    ],
    "osv_generated_from":  "https://github.com/CVEProject/cvelistV5/tree/main/cves/2025/27xxx/CVE-2025-27151.json"
}

References

Affected packages

Git / github.com/redis/redis

Affected ranges

Type

GIT

Repo

https://github.com/redis/redis

Events

Introduced

d375595d5e3ae2e5c29e6c00a2dc3d60578fd9fc

Fixed

080b99d9827eac9e8a6639922d64b8a8cc5c930c

Introduced

c9d29f6a918c335bc1778d9f68e521c1bbb36a0f

Fixed

08961e16dbfff61ad4f6ad482ae2e455e7085761

Introduced

e91a340e241cf0abe3c6a0c254214fbe4aa1d95f

Fixed

994bc96bb1744cb153392fc96bdba43eae56e17f

Fixed

643b5db235cb82508e72f11c7b4bbfc7dc39be56

Database specific

Show details

{
    "cpe":  "cpe:2.3:a:redis:redis:*:*:*:*:*:*:*:*",
    "extracted_events":  [
        {
            "introduced":  "7.0.0"
        },
        {
            "fixed":  "7.2.9"
        },
        {
            "introduced":  "7.4.0"
        },
        {
            "fixed":  "7.4.4"
        },
        {
            "introduced":  "8.0.0"
        },
        {
            "fixed":  "8.0.2"
        }
    ],
    "source":  [
        "CPE_RANGE",
        "REFERENCES"
    ]
}

Affected versions

7.*

7.4.0

7.4.1

7.4.2

7.4.3

8.*

8.0.0

8.0.1

8.0.1-int

Database specific

source

"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2025-27151.json"

vanir_signatures

[
    {
        "deprecated":  false,
        "digest":  {
            "line_hashes":  [
                "204361133470043369422735108006951014492",
                "266395016474126643708905170881553865497",
                "291104153020075789859589203955995153601"
            ],
            "threshold":  0.9
        },
        "id":  "CVE-2025-27151-3559ed69",
        "signature_type":  "Line",
        "signature_version":  "v1",
        "source":  "https://github.com/redis/redis/commit/643b5db235cb82508e72f11c7b4bbfc7dc39be56",
        "target":  {
            "file":  "src/redis-check-aof.c"
        }
    },
    {
        "deprecated":  false,
        "digest":  {
            "function_hash":  "327466512985566197169610813840867666992",
            "length":  1359
        },
        "id":  "CVE-2025-27151-bc576423",
        "signature_type":  "Function",
        "signature_version":  "v1",
        "source":  "https://github.com/redis/redis/commit/643b5db235cb82508e72f11c7b4bbfc7dc39be56",
        "target":  {
            "file":  "src/redis-check-aof.c",
            "function":  "redis_check_aof_main"
        }
    }
]

vanir_signatures_modified

"2026-08-12T15:16:20Z"