CVE-2026-34501 PUBLISHED

Apache Portable Runtime Utility: Heap buffer overflow in APR redis client

Assigner: apache
Reserved: 30.03.2026 Published: 06.08.2026 Updated: 06.08.2026

Heap-based Buffer Overflow vulnerability in Apache Portable Runtime Utility redis client.

This issue affects Apache Portable Runtime Utility: from 1.6.0 through 1.6.3.

Users are recommended to upgrade to version 1.6.4, which fixes the issue.

Product Status

Vendor Apache Software Foundation
Product Apache Portable Runtime Utility
Versions Default: unaffected
  • affected from 1.6.0 to 1.6.3 (incl.)

Credits

  • Elhanan Haenel finder

References

Problem Types

  • CWE-122 Heap-based Buffer Overflow CWE