PT-2026-4889 · Hiredis+1 · Hiredis+1

Titan Team · Published 2026-01-27 · Updated 2026-01-27 · CVE-2026-24814

Positive Technologies (AI Summary)

CVSS v4.0

10

Critical

Base vector

AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H/S:N/AU:Y/R:U/V:C/RE:L/U:Red

Name of the Vulnerable Software and Affected Versions swoole-src versions prior to 6.0.2

Description An integer overflow or wraparound condition exists in the sds.C file within the thirdparty/hiredis modules of swoole-src. This issue could allow for full system compromise.

Recommendations Update swoole-src to version 6.0.2 or later.

Fix

Integer Overflow

Weakness Enumeration

CWE-190

Related Identifiers

CVE-2026-24814

Affected Products

Hiredis

Swoole-Src

References · 5

• https://github.com/swoole/swoole-src/pull/5698 · Patch
• https://osv.dev/vulnerability/CVE-2026-24814 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2026-24814 · Security Note
• https://twitter.com/CVEnew/status/2016081239468298714 · Twitter Post
• https://twitter.com/0dayPublishing/status/2016076595404964039 · Twitter Post