CVE-2026-88412: Integer Overflow
Published Sep 21, 2026
·Updated
An integer overflow in the BulkInsertReadProperty component (/bulkinsert.c) of FalkorDB (Redis module) v4.20.1 allows attackers to cause a Denial of Service (DoS) via a crafted input.
Affected Software
1 affected component
FalkorDB FalkorDB=4.20.1
Event History
Sep 21, 2026
CVE Published
via MITRE·12:00 AM
Data Sourced
via MITRE·12:00 AM
DescriptionSeverity
Data Sourced
via NVD·09:17 PM
DescriptionSeverity
Frequently Asked Questions
1
What level of access does an attacker need to trigger the issue?
The available vector indicates network reachability is sufficient, with no authentication privileges or user interaction required. Exploitation requires sending crafted input that reaches the affected bulk-insert property-reading component.
2
Does this issue expose or modify database data?
The provided impact metrics indicate no confidentiality or integrity impact. The stated impact is denial of service.
3
Which FalkorDB releases are identified as affected?
The provided data identifies FalkorDB v4.20.1. It does not specify an affected version range, fixed release, or workaround.