CVE-2021-32628

CVE-2021-32628 is an integer overflow vulnerability in the ziplist data structure of Redis, an open-source in-memory database, affecting all versions prior to 6.2.6, 6.0.16, and 5.0.14. This flaw can lead to heap corruption and potentially remote code execution if specific ziplist configuration parameters are set to very large values and specially crafted commands are used. With a CVSS score of 7.5 (HIGH), exploitation requires low privileges but high attack complexity, potentially resulting in high impact to confidentiality, integrity, and availability. While there is no evidence of active exploitation, publicly available exploit code, or significant community discussion, patching to a fixed version or restricting CONFIG SET commands for unprivileged users is recommended.