CVE-2025-27151

[rhuddleston]

Describe the bug

Assuming this CVE also affects valkey: redis/redis@643b5db

[madolson]

Yeah, I'll go pull it.

[madolson]

https://nvd.nist.gov/vuln/detail/CVE-2025-27151 Doesn't seem to be a reported CVE.

[rhuddleston]

Yea it can take some time before it shows up there

[madolson]

They normally say they're reserved though if they already have already requested it. It's just odd to me, we've done a couple of these.

The fact they reported it as high seems a bit absurd give than it's a tooling using for checking AOF validity.

[rhuddleston]

might show different on nist.gov now, this one showing reserved: https://www.cve.org/CVERecord?id=CVE-2025-27151