CVE record · 1 source
CVE-2026-56388
The Redis server command parser in Apache bRPC accepts an empty RESP array as a command header.
- Vendor
- Apple, GitHub
- Product
- ios, github
- Exposure class
- Database, Mobile OS
Coverage
1Every item in the archive that references this CVE, highest rank first. Headlines open the publisher.
-
The Redis server command parser in Apache bRPC accepts an empty RESP array as a command header.
The Redis server command parser in Apache bRPC accepts an empty RESP array as a command header. A remote unauthenticated attacker who can reach a bRPC server with Redis service enabled can send an empty array header followed by a…