CVE-2024-51737 | RedisSearch up to 2.0 on Redis Redis Module FT.SEARCH/FT.AGGREGATE LIMIT/KNN heap-based overflow

A vulnerability, which was classified as critical, has been found in RedisSearch up to 2.0 on Redis. This issue affects the function FT.SEARCH/FT.AGGREGATE of the component Redis Module. The manipulation of the argument LIMIT/KNN leads to heap-based buffer overflow.

The identification of this vulnerability is CVE-2024-51737. The attack may be initiated remotely. There is no exploit available.

It is recommended to upgrade the affected component.