PT-2025-23460 · Valkey+4 · Valkey+4

Published 2025-06-02 · Updated 2025-11-26 · CVE-2025-49112

Positive Technologies (AI Summary)

CVSS v3.1

3.1

Low

Base vector

AV:A/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L

Name of the Vulnerable Software and Affected Versions Valkey versions 8.1.1 and earlier

Description The issue is related to an integer underflow in the setDeferredReply function, located in networking.c, which occurs when calculating prev->size - prev->used.

Recommendations For Valkey versions 8.1.1 and earlier, at the moment, there is no information about a newer version that contains a fix for this vulnerability.

Integer Underflow

Weakness Enumeration

CWE-191

Related Identifiers

AZL-62243

BDU:2026-00098

BIT-KEYDB-2025-49112

BIT-REDIS-2025-49112

BIT-VALKEY-2025-49112

CVE-2025-49112

ECHO-B783-E6AF-4B18

OESA-2025-1630

OPENSUSE-SU-2025:15306-1

SUSE-SU-2025:01942-1

SUSE-SU-2025:02231-1

SUSE-SU-2025_01942-1

SUSE-SU-2025_02231-1

USN-7893-1

Affected Products

Debian

Linuxmint

Suse

Ubuntu

Valkey

References · 43

• https://ubuntu.com/security/CVE-2025-46817 · Vendor Advisory
• https://osv.dev/vulnerability/AZL-62243 · Vendor Advisory
• https://osv.dev/vulnerability/BIT-keydb-2025-49112 · Vendor Advisory
• https://ubuntu.com/security/CVE-2025-46818 · Vendor Advisory
• https://osv.dev/vulnerability/openSUSE-SU-2025:15306-1 · Vendor Advisory
• https://bdu.fstec.ru/vul/2026-00098 · Security Note
• https://osv.dev/vulnerability/BIT-valkey-2025-49112 · Vendor Advisory
• https://ubuntu.com/security/notices/USN-7893-1 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2025-49112 · Vendor Advisory
• https://cve.org/CVERecord?id=CVE-2025-49112 · Security Note
• https://ubuntu.com/security/CVE-2025-49112 · Vendor Advisory
• https://osv.dev/vulnerability/OESA-2025-1630 · Vendor Advisory
• https://ubuntu.com/security/CVE-2025-46819 · Vendor Advisory
• https://osv.dev/vulnerability/BELL-CVE-2025-49112 · Vendor Advisory
• https://osv.dev/vulnerability/DEBIAN-CVE-2025-49112 · Vendor Advisory