Dossier
use-after-free
Coverage of use-after-free in the Nexus archive.
- A flaky test exposed a Redis client use-after-free
A flaky test revealed a use-after-free vulnerability in a Redis client, as detailed in an article by Buildkite Engineering. The issue was discovered during testing and highlights potential memory safety risks in Redis client implementations.
- Autonomous AI Tool Finds 2-Year-Old RCE Flaw in Redis (CVE-2026-23479)
Redis patched a use-after-free vulnerability in its blocking-client code, allowing authenticated users to execute arbitrary OS commands. The flaw, tracked as CVE-2026-23479, was introduced in Redis 7.2.0 and remained undetected for over two years until fixed on May 5. An autonomous AI tool designed to hunt bugs in large codebases discovered the issue.