Skip to content
The Nexus
DossierENTITY

use-after-free

Coverage of use-after-free in the Nexus archive.

Earliest in view: Jun 3 · 13:47 UTCMost recent: Jul 22 · 00:27 UTC
Co-mentioned in this coverage
Recent coverage
  • SECURITYJul 22 · 00:27 UTCHACKER NEWS
    A flaky test exposed a Redis client use-after-free

    A flaky test revealed a use-after-free vulnerability in a Redis client, as detailed in an article by Buildkite Engineering. The issue was discovered during testing and highlights potential memory safety risks in Redis client implementations.

  • SECURITYJun 3 · 13:47 UTCTHE HACKER NEWS
    Autonomous AI Tool Finds 2-Year-Old RCE Flaw in Redis (CVE-2026-23479)

    Redis patched a use-after-free vulnerability in its blocking-client code, allowing authenticated users to execute arbitrary OS commands. The flaw, tracked as CVE-2026-23479, was introduced in Redis 7.2.0 and remained undetected for over two years until fixed on May 5. An autonomous AI tool designed to hunt bugs in large codebases discovered the issue.