An integer overflow occurs in the _BulkInsert_ReadProperty component (/bulk_insert.c) of FalkorDB, a Redis module. The overflow allows an attacker to send a specially crafted bulk insert command that causes the module to crash, resulting in a denial of service. The vulnerability does not expose data or enable code execution; its primary effect is to render the database or application unavailable to legitimate users.

FalkorDB, Redis module version 4.20.1. No other vendor or product versions are currently listed as affected.

The CVSS score of 5.3 indicates a moderate severity. The EPSS score is not available, and the vulnerability is not listed in the CISA KEV catalog. Attackers would need the ability to execute the bulk insert command against the vulnerable instance, which typically requires authenticated access or network visibility to the Redis server. Exploitation is straightforward from the description, making the vulnerability likely to be discovered and used in environments where FalkorDB is exposed.