FalkorDB, a Redis module, contains a buffer overflow in the _Decode_GrB_Matrix function within decode_matrix.c. The flaw permits an attacker to supply maliciously crafted data that overflows a buffer, resulting in a crash of the Redis process. The impact is a denial of service, disrupting availability of the Redis instance and any services depending on it.

Affected vendor is FalkorDB, specifically the Redis module version 4.20.1 through 4.20.4. Users running those versions are at risk; versions 4.20.5 and later have resolved the issue.

CVSS score of 8.8 indicates high severity. The EPSS score is 0.00276 (less than 1%), and the vulnerability is not listed in CISA's KEV, suggesting no publicly confirmed exploits. The module’s failure occurs when parsing incoming data, implying that an attacker could trigger the DoS by sending specially crafted payloads over the Redis network interface. No authentication or privilege prerequisites are documented, so the attack vector is inferred to be remote and potentially accessible to anyone who can send commands to the Redis instance.