FalkorDB (Redis module) v4.20.1 to v4.20.4 was discovered to contain a buffer overflow in the _Decode_GrB_Matrix function (/v19/decode_matrix.c). This vulnerability allows attackers to cause a Denial…

High CVSS 8.8

CVECVE-2026-88409

First seen2026-09-22 15:17 UTC

Disclosed2026-09-21 21:17 UTC

Last updated2026-09-22 15:17 UTC

Channel statusauto

Summary

FalkorDB (Redis module) v4.20.1 to v4.20.4 was discovered to contain a buffer overflow in the _Decode_GrB_Matrix function (/v19/decode_matrix.c). This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted input.

In-depth triage

No in-depth report has been generated yet (DR-003 v2 AI pipeline is under construction).

Sources

NVD DATABASE

Original Links

https://github.com/FalkorDB/FalkorDB/issues/2399

Timeline

2026-09-22 nvd_ingest NVD