DragonflyDB’s RESTORE command can be abused with a crafted payload that triggers an out‑of‑bounds read in the listpack loader, causing an immediate segmentation fault and crashing the entire server process. The resulting denial of service is repeatable with a single around 24‑byte command and is classified as a buffer over-read issue (CWE‑125).

All DragonflyDB Dragonfly instances running a version older than 1.39.0, especially those with the default configuration that allows unauthenticated connections and exposes the RESTORE command, are susceptible to this crash. Any client that can send commands over the network could trigger the exploit.

The CVSS score of 7.5 highlights the high severity of this flaw. EPSS data is unavailable, leaving the precise exploitation probability uncertain, but the lack of authentication and the minute effort required to form the trigger make a remote attack feasible. The vulnerability is not currently listed in the CISA KEV catalog; however, it remains a dependable remote denial‑of‑service vector that can be delivered without further privilege escalation.