CVE-2025-26413

HighCVSS 7.5/10Last modified Jun 17, 2026

Description

Improper Input Validation vulnerability in Apache Kvrocks.

The SETRANGE command didn't check if the `offset` input is a positive integer and use it as an index of a string. So it will cause the server to crash due to its index is out of range. This issue affects Apache Kvrocks: through 2.11.1.

Users are recommended to upgrade to version 2.12.0, which fixes the issue.

Metrics

CVSS 3.1 7.5/10CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Weakness enumeration

CWE-20

Affected software

Vendor	Product	Versions
Apache Software Foundation	Apache Kvrocks	<= 2.11.1

References

https://lists.apache.org/thread/388743qrr8yq8qm0go8tls6rf1kog8dwMailing List, Vendor Advisory
http://www.openwall.com/lists/oss-security/2025/04/22/1Mailing List, Third Party Advisory

Timeline

Published: Apr 22, 2025
Last modified: Jun 17, 2026
NVD status: Analyzed

Related CVEs from 2025

CVE-2025-264169.8In initializeSwizzler of SkBmpStandardCodec.cpp, there is a possible out of bounds write due to a heap buffer overflow. This could lead to r CVE-2025-264174.0In checkWhetherCallingAppHasAccess of DownloadProvider.java, there is a possible bypass of user consent when opening files in shared storage CVE-2025-264187.8In setUserDisclaimerAcknowledged of CarDevicePolicyService.java, there is a possible way to bypass the user dialog when adding an account to CVE-2025-264193.3In initPhoneSwitch of SystemSettingsFragment.java, there is a possible FRP bypass due to a logic error in the code. This could lead to local CVE-2025-26429.8A vulnerability, which was classified as critical, was found in PHPGurukul Art Gallery Management System 1.0. This affects an unknown part o CVE-2025-264204.4In multiple functions of GrantPermissionsActivity.java , there is a possible way to trick the user into granting the incorrect permission du CVE-2025-264214.0In multiple locations, there is a possible lock screen bypass due to a logic error in the code. This could lead to local escalation of privi CVE-2025-264224.0In dump of WindowManagerService.java, there is a possible way of running dumpsys without the required permission due to a missing permission CVE-2025-264236.2In validateIpConfiguration of WifiConfigurationUtil.java, there is a possible way to trigger a permanent DoS due to a missing bounds check. CVE-2025-264244.0In multiple functions of VpnManager.java, there is a possible cross-user data leak due to a logic error in the code. This could lead to loca CVE-2025-264254.0In multiple functions of RoleService.java, there is a possible permission squatting vulnerability due to a logic error in the code. This cou CVE-2025-264265.1In BroadcastController.java of registerReceiverWithFeatureTraced, there is a possible way to receive broadcasts meant for the "android" pack