CVE-2025-52935: Integer Overflow or Wraparound vulnerability in dragonflydb/dragonfly
Published Jun 23, 2025
·Updated
Integer Overflow or Wraparound vulnerability in dragonflydb dragonfly (src/redis/lua/struct modules). This vulnerability is associated with program files luastruct.C.
This issue affects dragonfly: 1.30.1, 1.30.0, 1.28.18.
Affected Software
1 affected component
DragonflyDB Dragonfly>=1.28.18<=1.30.1
Event History
Jun 23, 2025
CVE Published
via MITRE·09:27 AM
Data Sourced
via MITRE·09:27 AM
DescriptionWeakness
Data Sourced
via NVD·10:15 AM
DescriptionSeverityWeakness
Frequently Asked Questions
1
What is the severity of CVE-2025-52935?
CVE-2025-52935 has been classified with a severity rating that indicates a critical risk for systems running affected versions of DragonflyDB.
2
How do I fix CVE-2025-52935?
To fix CVE-2025-52935, you should upgrade to DragonflyDB version 1.30.2 or later.
3
What versions of DragonflyDB are affected by CVE-2025-52935?
CVE-2025-52935 affects DragonflyDB versions 1.30.1, 1.30.0, and 1.28.18.
4
What type of vulnerability is CVE-2025-52935?
CVE-2025-52935 is classified as an Integer Overflow or Wraparound vulnerability.
5
Where can I find more technical details about CVE-2025-52935?
Technical details about CVE-2025-52935 can typically be found in the DragonflyDB GitHub repository's commit history and issue tracking.