# Redis 8.4.6

- Product: Redis (https://whatsnew.fyi/product/redis)
- Vendor: Redis
- Date: 2026-08-17
- Version: 8.4.6
- Original notes: https://github.com/redis/redis/releases/tag/8.4.6
- Permalink: https://whatsnew.fyi/product/redis/releases/8.4.6

What's New is an index, not a publisher: every entry below links to the vendor's own release notes, which are the authoritative source. Entries are labelled where they are hand-curated sample data, pre-releases, or drawn from a secondary source such as a developer blog.

Reuse: the summaries, labels and curation here are © What's New. Quote freely with attribution and a link back; wholesale republication of the corpus is not permitted — terms: https://whatsnew.fyi/terms. The vendors' own release notes remain their publishers'.

---

- **security** — Fix miscalculated buffer size in CMSketch RDB loading that may lead to heap out-of-bounds write (CVE-2026-62356)
- **security** — Fix out-of-bounds access in TopK heap cleanup path
- **security** — Fix use-after-free in the TLS pending-data list when a command closes another pending connection
- **security** — Fix ACL key permission bypass in SORT, GEORADIUS, GEORADIUSBYMEMBER, XREAD, and XREADGROUP commands
- **security** — Fix out-of-bounds argv access during key extraction when checking ACL permissions of KEYNUM keyspec commands with wrong arity
- **security** — Fix memory corruption during RDB loading caused by out-of-range SLOT_INFO slot id that may lead to Remote Code Execution
- **security** — Fix missing node level validation when loading a vector set from RDB that may lead to out-of-bounds access
- **security** — Fix use-after-free in Vector Sets when VREM mutates the HNSW graph while background VSIM threads are running
- **security** — Fix negative hnsw_search() return being treated as huge unsigned count, reading past the end of result arrays in Vector Sets
- **security** — Fix use-after-free in the blocked-client list when reprocessing a command evicts another client blocked on the same key

Update urgency: `SECURITY`: There are security fixes in the release.

###### Security fixes

- (CVE-2026-62356) Miscalculated buffer size in `CMSketch` RDB loading may lead to heap OOB write
- Out-of-bounds access in TopK heap cleanup path (MOD-15410)
- Use-after-free in the TLS pending-data list when a command closes another pending connection
- #15478 ACL key permission bypass in `SORT`, `GEORADIUS`/`GEORADIUSBYMEMBER` and `XREAD`/`XREADGROUP`: the keys validated by ACL could differ from the keys the command actually accesses
- #14847 Out-of-bounds `argv` access during key extraction when checking ACL permissions of a KEYNUM keyspec command (e.g. `EVAL`) with wrong arity
- A malicious RDB payload with an out-of-range `SLOT_INFO` slot id causes memory corruption during RDB loading, which may lead to Remote Code Execution
- Vector Sets: missing node level validation when loading a vector set from RDB may lead to out-of-bounds access
- Vector Sets: use-after-free when `VREM` mutates the HNSW graph while background `VSIM` threads are still running
- Vector Sets: a negative `hnsw_search()` return was treated as a huge unsigned count, reading past the end of the result arrays
- #15594 Use-after-free in the blocked-client list when reprocessing a command evicts another client blocked on the same key