{"id":"CVE-2021-3470","details":"A heap overflow issue was found in Redis in versions before 5.0.10, before 6.0.9 and before 6.2.0 when using a heap allocator other than jemalloc or glibc's malloc, leading to potential out of bound write or process crash. Effectively this flaw does not affect the vast majority of users, who use jemalloc or glibc malloc.","modified":"2026-08-18T15:01:18.847883Z","published":"2021-03-31T14:15:20.937Z","database_specific":{"unresolved_ranges":[{"source":"CPE_STRING","vendor_product":"redislabs:redis","cpes":["cpe:2.3:a:redislabs:redis:6.2.0:rc1:*:*:*:*:*:*","cpe:2.3:a:redislabs:redis:6.2.0:rc2:*:*:*:*:*:*","cpe:2.3:a:redislabs:redis:6.2.0:rc3:*:*:*:*:*:*"],"extracted_events":[{"introduced":"6.2.0-rc1"},{"last_affected":"6.2.0-rc1"},{"introduced":"6.2.0-rc2"},{"last_affected":"6.2.0-rc2"},{"introduced":"6.2.0-rc3"},{"last_affected":"6.2.0-rc3"}]}]},"references":[{"type":"FIX","url":"https://bugzilla.redhat.com/show_bug.cgi?id=1943623"}],"affected":[{"ranges":[{"type":"GIT","repo":"https://github.com/redis/redis","events":[{"introduced":"0"},{"fixed":"a767d84a7273ea05bbfbb23f4eef63af7f4a613d"},{"introduced":"17dfd7cabbf7954f92b7a1243d4bb27fee5d4500"},{"fixed":"25214bd7dc2f4c995d76020e95180eb4e6d51672"}],"database_specific":{"cpe":"cpe:2.3:a:redislabs:redis:*:*:*:*:*:*:*:*","extracted_events":[{"introduced":"0"},{"fixed":"5.0.10"},{"introduced":"6.0.0"},{"fixed":"6.0.9"}],"source":"CPE_RANGE"}}],"versions":["6.0.8","6.0.7","6.0.6","6.0.5","6.0.4","6.0.3","6.0.2","6.0.1","6.0.0","5.0.9","5.0.8","5.0.7","5.0.6","5.0.5","5.0.4","5.0.3","5.0.2","5.0.1","5.0.0","5.0-rc6","5.0-rc5","5.0-rc4","5.0-rc3","5.0-rc2","5.0-rc1","2.3-alpha0","2.2.0-rc1","2.2-alpha6","2.2-alpha5","2.2-alpha4","2.2-alpha3","2.2-alpha2","2.2-alpha1","2.2-alpha0","v2.0.0-rc1","v2.1.1-watch","v1.3.11","v1.3.10","v1.3.9","v1.3.8","v1.3.7","1.3.6","vm-playpen"],"database_specific":{"source":"https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2021-3470.json","vanir_signatures_modified":"2026-08-18T15:01:18Z","vanir_signatures":[{"deprecated":false,"digest":{"line_hashes":["98964882074945733751311516603340189559","230803765453809963299864293919790295028","243859763342964630570980923915991170684","68884579141477548648148203384162253273","162747755613878333719690609041726761845","21768604112216208072036754617435148028","258380497625176050313430929159928959665","33030136671067620788959534346992734631"],"threshold":0.9},"id":"CVE-2021-3470-d9c2de3c","signature_type":"Line","signature_version":"v1","source":"https://github.com/redis/redis/commit/25214bd7dc2f4c995d76020e95180eb4e6d51672","target":{"file":"src/help.h"}}]}}],"schema_version":"1.9.0","severity":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L"}]}