A buffer overflow vulnerability in the FalkorDB Redis module allows remote attackers to cause a denial of service via crafted input.

A buffer overflow exists within the _Decode_GrB_Matrix function located in the source file v19/decode_matrix.c. An attacker with low-level privileges can provide specially crafted input that exceeds buffer boundaries, leading to an application crash or potentially other memory corruption behaviors.

The vulnerability carries a CVSS score of 8.8 (High), primarily due to the potential for service disruption. A successful denial of service attack against the Redis module could render dependent applications unusable, causing significant operational downtime and impacting business continuity for services relying on FalkorDB for data processing.

Immediate Action: Monitor the official FalkorDB repository for the release of a patched version and apply it as soon as it becomes available.

Proactive Monitoring: Monitor logs for abnormal memory usage or service crashes that may indicate an attempt to trigger the buffer overflow condition.

Compensating Controls: Implement strict input validation or sanitization at the application layer to prevent malicious or malformed data from reaching the database module.

Public Exploit Available: Unknown

While a patch is not yet explicitly identified, users should track the vendor's security updates closely. Given the high severity of memory corruption vulnerabilities, immediate action should be taken once the vendor provides a remediation path.