CVE-2024-51480

HighCVSS 7.0/10Last modified Jun 17, 2026

Description

RedisTimeSeries is a time-series database (TSDB) module for Redis, by Redis. Executing one of these commands TS.QUERYINDEX, TS.MGET, TS.MRAGE, TS.MREVRANGE by an authenticated user, using specially crafted command arguments may cause an integer overflow, a subsequent heap overflow, and potentially lead to remote code execution. This vulnerability is fixed in 1.6.20, 1.8.15, 1.10.15, and 1.12.3.

Metrics

CVSS 3.1 7.0/10CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-122CWE-190

Affected software

No affected versions have been published.

Timeline

Published
Jan 8, 2025
Last modified
Jun 17, 2026
NVD status
Deferred

Related CVEs from 2024

CVE-2024-514811.0Nix is a package manager for Linux and other Unix systems. On macOS, built-in builders (such as `builtin:fetchurl`, exposed to users with `iCVE-2024-514829.9ZoneMinder is a free, open source closed-circuit television software application. ZoneMinder v1.37.* <= 1.37.64 is vulnerable to boolean-basCVE-2024-514836.9changedetection.io is free, open source web page change detection software. Prior to version 0.47.5, when a WebDriver is used to fetch filesCVE-2024-514848.1Ampache is a web based audio/video streaming application and file manager. The current implementation of token parsing fails to properly valCVE-2024-514858.1Ampache is a web based audio/video streaming application and file manager. The current implementation of token parsing fails to properly valCVE-2024-514868.4Ampache is a web based audio/video streaming application and file manager. The vulnerability exists in the interface section of the Ampache CVE-2024-514878.1Ampache is a web based audio/video streaming application and file manager. The current implementation of token parsing fails to properly valCVE-2024-514885.4Ampache is a web based audio/video streaming application and file manager. The current implementation of token parsing does not adequately vCVE-2024-514895.4Ampache is a web based audio/video streaming application and file manager. The current implementation of token parsing does not adequately vCVE-2024-51495.3The BuddyForms plugin for WordPress is vulnerable to Email Verification Bypass in all versions up to, and including, 2.8.9 via the use of anCVE-2024-514909.0Ampache is a web based audio/video streaming application and file manager. This vulnerability exists in the interface section of the AmpacheCVE-2024-514913.3notion-go is a collection of libraries for supporting sign and verify OCI artifacts. Based on Notary Project specifications. The issue was i