Vulnerability-Lookup

RHBA-2025:16395

Vulnerability from csaf_redhat - Published: 2025-09-23 08:55 - Updated: 2026-08-07 13:42

Summary

Red Hat Bug Fix Advisory: Red Hat Quay v3.12.12 bug fix release

Severity

Important

Notes

Topic: Red Hat Quay 3.12.12 is now available with bug fixes. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.

Details: Quay 3.12.12

Terms of Use: This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.

CVE-2025-32023

A flaw was found in Redis. This flaw allows an authenticated user to trigger an integer overflow by sending a specially crafted string, resulting in a stack or heap out-of-bounds write during hyperloglog operations. This issue potentially results in remote code execution.

8.8 (High)


                
                  CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

CWE-787 - Out-of-bounds Write

Affected products

Fixed 30 products

Product	Version	Remediation
Unresolved product id: 8Base-Quay-3:quay/clair-rhel8@sha256:b073e898f754a957128036c741b95e5f3f6bbc98c28016c4f114c42714d1aaba_amd64	—	Vendor Fix fix Workaround
Unresolved product id: 8Base-Quay-3:quay/clair-rhel8@sha256:b6612509c1d373630490567108a00ceb01fba992f374a2bea00d0193ed2b836e_s390x	—	Vendor Fix fix Workaround
Unresolved product id: 8Base-Quay-3:quay/clair-rhel8@sha256:e06917042d4df095767c57e8b7032a90978842ed5c050b5d224131e737fc937f_ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: 8Base-Quay-3:quay/quay-bridge-operator-bundle@sha256:46bc4af0e35f1c7e15be1b1216c9a9729ac6a2cd6afb0e8eecf039b07d87ad19_s390x	—	Vendor Fix fix Workaround
Unresolved product id: 8Base-Quay-3:quay/quay-bridge-operator-bundle@sha256:4c4c98b6cecd51c6644eb79b85789b7ebbcdc662edbb66ce435ea3b5e58d9273_amd64	—	Vendor Fix fix Workaround
Unresolved product id: 8Base-Quay-3:quay/quay-bridge-operator-bundle@sha256:6bd8b2b1763f64591ce18d5d5cda64bedb28f50f334ed959ca650722d58d8b4f_ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: 8Base-Quay-3:quay/quay-bridge-operator-rhel8@sha256:10614cb306ee729afd0a3227ac31a419124f801fc8dc32a93d311beb90354611_ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: 8Base-Quay-3:quay/quay-bridge-operator-rhel8@sha256:47bb98ec66982da4a169ab85c67831a370c8beda4f998f6827f7d1718f221528_amd64	—	Vendor Fix fix Workaround
Unresolved product id: 8Base-Quay-3:quay/quay-bridge-operator-rhel8@sha256:7fe583bfbc014cb8b6e68a71689b2f4e8c020f71278eaf36191b55266443c189_s390x	—	Vendor Fix fix Workaround
Unresolved product id: 8Base-Quay-3:quay/quay-builder-qemu-rhcos-rhel8@sha256:1b36a4a98ebe17e66fab4b82fc483757bccfcc5aa6c8e1c01fc177c7a8b99506_s390x	—	Vendor Fix fix Workaround
Unresolved product id: 8Base-Quay-3:quay/quay-builder-qemu-rhcos-rhel8@sha256:9e589ef110d149c733fa8f2e51534e5e0d652958fb24626ee4f0ff7d49ebd6a6_ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: 8Base-Quay-3:quay/quay-builder-qemu-rhcos-rhel8@sha256:a6787b4ebf263864a444b6d24796612af57b572bb13b2aa6baaf8e8a257cc5c3_amd64	—	Vendor Fix fix Workaround
Unresolved product id: 8Base-Quay-3:quay/quay-builder-rhel8@sha256:353eaa68bea50264aa31ead900df7b118148b58fa2411a4ecd155c960c028d13_s390x	—	Vendor Fix fix Workaround
Unresolved product id: 8Base-Quay-3:quay/quay-builder-rhel8@sha256:5114a2d9f7c0116f85b27fe39a919eae0113a76c5b9d6d9beb8553c7358b43c2_ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: 8Base-Quay-3:quay/quay-builder-rhel8@sha256:ea585ad957f5bbdb5aa886aebaae418cf132797cf0727608e2ae6ada739ba83d_amd64	—	Vendor Fix fix Workaround
Unresolved product id: 8Base-Quay-3:quay/quay-container-security-operator-bundle@sha256:1c171ba04cfb5edb5ee2c51a7723e52f4e793025df47f35b928c8c1d3314a8f2_s390x	—	Vendor Fix fix Workaround
Unresolved product id: 8Base-Quay-3:quay/quay-container-security-operator-bundle@sha256:4118ac24588b6b5675d71a238e7b2882227c5b6b249fd3cadb8cc64235d6f81c_ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: 8Base-Quay-3:quay/quay-container-security-operator-bundle@sha256:d17af97462de060dc21f997dac973d9f895ce91f80821f1a810d93dbcbda31e3_amd64	—	Vendor Fix fix Workaround
Unresolved product id: 8Base-Quay-3:quay/quay-container-security-operator-rhel8@sha256:4fb11329cbb4b41de5a5fbae820d95b5610eea097215f3dad851fb7dd573a11b_amd64	—	Vendor Fix fix Workaround
Unresolved product id: 8Base-Quay-3:quay/quay-container-security-operator-rhel8@sha256:a48077a1e13994284beb1e0d00af1e9282e22fa805f849d04aec6ff9664ccf04_s390x	—	Vendor Fix fix Workaround
Unresolved product id: 8Base-Quay-3:quay/quay-container-security-operator-rhel8@sha256:d71b24b4b7cc4aa165fab6e06c3ee7c2cff3f5da3cd0b93faffc3be6ac55a5d2_ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: 8Base-Quay-3:quay/quay-operator-bundle@sha256:28e37ec35de1307405264cd4f79aaa6ce4d4ecbd6cbc27f4fef5db415c678d64_amd64	—	Vendor Fix fix Workaround
Unresolved product id: 8Base-Quay-3:quay/quay-operator-bundle@sha256:5dc4c6886ac17ffe09f50ca014e61bea68aa04c93a08dd4d3e20a80b4c1e86e4_s390x	—	Vendor Fix fix Workaround
Unresolved product id: 8Base-Quay-3:quay/quay-operator-bundle@sha256:ef7c78058382c87b2c6dcc94fd98c7fe16679955cc3b27def8166b0dacc5a657_ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: 8Base-Quay-3:quay/quay-operator-rhel8@sha256:343a2a0581040be2bd824ee5eb0aedae53d2284ebddc3f5fdc5e39362f714d9a_s390x	—	Vendor Fix fix Workaround
Unresolved product id: 8Base-Quay-3:quay/quay-operator-rhel8@sha256:b6ceb858f6a9341f249a71216f865519be3ccd011e2a7d7c26d6b7d4c0071393_amd64	—	Vendor Fix fix Workaround
Unresolved product id: 8Base-Quay-3:quay/quay-operator-rhel8@sha256:f47a67dd1b54c43496c36cd9e41319faf98f5ee3a154455f2b74ea1b048930bd_ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: 8Base-Quay-3:quay/quay-rhel8@sha256:5d36d48a5c8cb1d159d3afce09630d790b67e22ac6bd8d8e92c9ed353f6cb1c4_s390x	—	Vendor Fix fix Workaround
Unresolved product id: 8Base-Quay-3:quay/quay-rhel8@sha256:a7414a79e3de34afcf40075573084f15edf60489f4b7e2454579a55d900ec487_ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: 8Base-Quay-3:quay/quay-rhel8@sha256:f6ffc1c38e412b81113598d9ace10c3fbb7420d7f5155920777a8d6c24e61729_amd64	—	Vendor Fix fix Workaround

Threats

Impact Important

References

12 references

URL	Category
https://access.redhat.com/errata/RHBA-2025:16395	self
https://security.access.redhat.com/data/csaf/v2/a…	self
https://access.redhat.com/security/cve/CVE-2025-32023	self
https://bugzilla.redhat.com/show_bug.cgi?id=2376858	external
https://www.cve.org/CVERecord?id=CVE-2025-32023	external
https://nvd.nist.gov/vuln/detail/CVE-2025-32023	external
https://github.com/redis/redis/commit/50188747cbf…	external
https://github.com/redis/redis/releases/tag/6.2.19	external
https://github.com/redis/redis/releases/tag/7.2.10	external
https://github.com/redis/redis/releases/tag/7.4.5	external
https://github.com/redis/redis/releases/tag/8.0.3	external
https://github.com/redis/redis/security/advisorie…	external

JSON

To clipboard

{
  "document": {
    "aggregate_severity": {
      "namespace": "https://access.redhat.com/security/updates/classification/",
      "text": "Important"
    },
    "category": "csaf_security_advisory",
    "csaf_version": "2.0",
    "distribution": {
      "text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.",
      "tlp": {
        "label": "WHITE",
        "url": "https://www.first.org/tlp/"
      }
    },
    "lang": "en",
    "notes": [
      {
        "category": "summary",
        "text": "Red Hat Quay 3.12.12 is now available with bug fixes.\n\nRed Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.",
        "title": "Topic"
      },
      {
        "category": "general",
        "text": "Quay 3.12.12",
        "title": "Details"
      },
      {
        "category": "legal_disclaimer",
        "text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.",
        "title": "Terms of Use"
      }
    ],
    "publisher": {
      "category": "vendor",
      "contact_details": "https://access.redhat.com/security/team/contact/",
      "issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.",
      "name": "Red Hat Product Security",
      "namespace": "https://www.redhat.com"
    },
    "references": [
      {
        "category": "self",
        "summary": "https://access.redhat.com/errata/RHBA-2025:16395",
        "url": "https://access.redhat.com/errata/RHBA-2025:16395"
      },
      {
        "category": "self",
        "summary": "Canonical URL",
        "url": "https://security.access.redhat.com/data/csaf/v2/advisories/2025/rhba-2025_16395.json"
      }
    ],
    "title": "Red Hat Bug Fix Advisory: Red Hat Quay v3.12.12 bug fix release",
    "tracking": {
      "current_release_date": "2026-08-07T13:42:03+00:00",
      "generator": {
        "date": "2026-08-07T13:42:03+00:00",
        "engine": {
          "name": "Red Hat SDEngine",
          "version": "5.3.12"
        }
      },
      "id": "RHBA-2025:16395",
      "initial_release_date": "2025-09-23T08:55:34+00:00",
      "revision_history": [
        {
          "date": "2025-09-23T08:55:34+00:00",
          "number": "1",
          "summary": "Initial version"
        },
        {
          "date": "2025-09-23T08:55:34+00:00",
          "number": "2",
          "summary": "Last updated version"
        },
        {
          "date": "2026-08-07T13:42:03+00:00",
          "number": "3",
          "summary": "Last generated version"
        }
      ],
      "status": "final",
      "version": "3"
    }
  },
  "product_tree": {
    "branches": [
      {
        "branches": [
          {
            "branches": [
              {
                "category": "product_name",
                "name": "Quay v3",
                "product": {
                  "name": "Quay v3",
                  "product_id": "8Base-Quay-3",
                  "product_identification_helper": {
                    "cpe": "cpe:/a:redhat:quay:3::el8"
                  }
                }
              }
            ],
            "category": "product_family",
            "name": "Red Hat Quay"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "quay/quay-bridge-operator-bundle@sha256:4c4c98b6cecd51c6644eb79b85789b7ebbcdc662edbb66ce435ea3b5e58d9273_amd64",
                "product": {
                  "name": "quay/quay-bridge-operator-bundle@sha256:4c4c98b6cecd51c6644eb79b85789b7ebbcdc662edbb66ce435ea3b5e58d9273_amd64",
                  "product_id": "quay/quay-bridge-operator-bundle@sha256:4c4c98b6cecd51c6644eb79b85789b7ebbcdc662edbb66ce435ea3b5e58d9273_amd64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/quay-bridge-operator-bundle@sha256:4c4c98b6cecd51c6644eb79b85789b7ebbcdc662edbb66ce435ea3b5e58d9273?arch=amd64\u0026repository_url=registry.redhat.io/quay/quay-bridge-operator-bundle\u0026tag=v3.12.12-4"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "quay/quay-bridge-operator-rhel8@sha256:47bb98ec66982da4a169ab85c67831a370c8beda4f998f6827f7d1718f221528_amd64",
                "product": {
                  "name": "quay/quay-bridge-operator-rhel8@sha256:47bb98ec66982da4a169ab85c67831a370c8beda4f998f6827f7d1718f221528_amd64",
                  "product_id": "quay/quay-bridge-operator-rhel8@sha256:47bb98ec66982da4a169ab85c67831a370c8beda4f998f6827f7d1718f221528_amd64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/quay-bridge-operator-rhel8@sha256:47bb98ec66982da4a169ab85c67831a370c8beda4f998f6827f7d1718f221528?arch=amd64\u0026repository_url=registry.redhat.io/quay/quay-bridge-operator-rhel8\u0026tag=v3.12.12-3"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "quay/quay-builder-rhel8@sha256:ea585ad957f5bbdb5aa886aebaae418cf132797cf0727608e2ae6ada739ba83d_amd64",
                "product": {
                  "name": "quay/quay-builder-rhel8@sha256:ea585ad957f5bbdb5aa886aebaae418cf132797cf0727608e2ae6ada739ba83d_amd64",
                  "product_id": "quay/quay-builder-rhel8@sha256:ea585ad957f5bbdb5aa886aebaae418cf132797cf0727608e2ae6ada739ba83d_amd64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/quay-builder-rhel8@sha256:ea585ad957f5bbdb5aa886aebaae418cf132797cf0727608e2ae6ada739ba83d?arch=amd64\u0026repository_url=registry.redhat.io/quay/quay-builder-rhel8\u0026tag=v3.12.12-3"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "quay/quay-builder-qemu-rhcos-rhel8@sha256:a6787b4ebf263864a444b6d24796612af57b572bb13b2aa6baaf8e8a257cc5c3_amd64",
                "product": {
                  "name": "quay/quay-builder-qemu-rhcos-rhel8@sha256:a6787b4ebf263864a444b6d24796612af57b572bb13b2aa6baaf8e8a257cc5c3_amd64",
                  "product_id": "quay/quay-builder-qemu-rhcos-rhel8@sha256:a6787b4ebf263864a444b6d24796612af57b572bb13b2aa6baaf8e8a257cc5c3_amd64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/quay-builder-qemu-rhcos-rhel8@sha256:a6787b4ebf263864a444b6d24796612af57b572bb13b2aa6baaf8e8a257cc5c3?arch=amd64\u0026repository_url=registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8\u0026tag=v3.12.12-3"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "quay/clair-rhel8@sha256:b073e898f754a957128036c741b95e5f3f6bbc98c28016c4f114c42714d1aaba_amd64",
                "product": {
                  "name": "quay/clair-rhel8@sha256:b073e898f754a957128036c741b95e5f3f6bbc98c28016c4f114c42714d1aaba_amd64",
                  "product_id": "quay/clair-rhel8@sha256:b073e898f754a957128036c741b95e5f3f6bbc98c28016c4f114c42714d1aaba_amd64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/clair-rhel8@sha256:b073e898f754a957128036c741b95e5f3f6bbc98c28016c4f114c42714d1aaba?arch=amd64\u0026repository_url=registry.redhat.io/quay/clair-rhel8\u0026tag=v3.12.12-3"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "quay/quay-container-security-operator-bundle@sha256:d17af97462de060dc21f997dac973d9f895ce91f80821f1a810d93dbcbda31e3_amd64",
                "product": {
                  "name": "quay/quay-container-security-operator-bundle@sha256:d17af97462de060dc21f997dac973d9f895ce91f80821f1a810d93dbcbda31e3_amd64",
                  "product_id": "quay/quay-container-security-operator-bundle@sha256:d17af97462de060dc21f997dac973d9f895ce91f80821f1a810d93dbcbda31e3_amd64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/quay-container-security-operator-bundle@sha256:d17af97462de060dc21f997dac973d9f895ce91f80821f1a810d93dbcbda31e3?arch=amd64\u0026repository_url=registry.redhat.io/quay/quay-container-security-operator-bundle\u0026tag=v3.12.12-3"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "quay/quay-container-security-operator-rhel8@sha256:4fb11329cbb4b41de5a5fbae820d95b5610eea097215f3dad851fb7dd573a11b_amd64",
                "product": {
                  "name": "quay/quay-container-security-operator-rhel8@sha256:4fb11329cbb4b41de5a5fbae820d95b5610eea097215f3dad851fb7dd573a11b_amd64",
                  "product_id": "quay/quay-container-security-operator-rhel8@sha256:4fb11329cbb4b41de5a5fbae820d95b5610eea097215f3dad851fb7dd573a11b_amd64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/quay-container-security-operator-rhel8@sha256:4fb11329cbb4b41de5a5fbae820d95b5610eea097215f3dad851fb7dd573a11b?arch=amd64\u0026repository_url=registry.redhat.io/quay/quay-container-security-operator-rhel8\u0026tag=v3.12.12-3"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "quay/quay-operator-bundle@sha256:28e37ec35de1307405264cd4f79aaa6ce4d4ecbd6cbc27f4fef5db415c678d64_amd64",
                "product": {
                  "name": "quay/quay-operator-bundle@sha256:28e37ec35de1307405264cd4f79aaa6ce4d4ecbd6cbc27f4fef5db415c678d64_amd64",
                  "product_id": "quay/quay-operator-bundle@sha256:28e37ec35de1307405264cd4f79aaa6ce4d4ecbd6cbc27f4fef5db415c678d64_amd64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/quay-operator-bundle@sha256:28e37ec35de1307405264cd4f79aaa6ce4d4ecbd6cbc27f4fef5db415c678d64?arch=amd64\u0026repository_url=registry.redhat.io/quay/quay-operator-bundle\u0026tag=v3.12.12-18"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "quay/quay-operator-rhel8@sha256:b6ceb858f6a9341f249a71216f865519be3ccd011e2a7d7c26d6b7d4c0071393_amd64",
                "product": {
                  "name": "quay/quay-operator-rhel8@sha256:b6ceb858f6a9341f249a71216f865519be3ccd011e2a7d7c26d6b7d4c0071393_amd64",
                  "product_id": "quay/quay-operator-rhel8@sha256:b6ceb858f6a9341f249a71216f865519be3ccd011e2a7d7c26d6b7d4c0071393_amd64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/quay-operator-rhel8@sha256:b6ceb858f6a9341f249a71216f865519be3ccd011e2a7d7c26d6b7d4c0071393?arch=amd64\u0026repository_url=registry.redhat.io/quay/quay-operator-rhel8\u0026tag=v3.12.12-3"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "quay/quay-rhel8@sha256:f6ffc1c38e412b81113598d9ace10c3fbb7420d7f5155920777a8d6c24e61729_amd64",
                "product": {
                  "name": "quay/quay-rhel8@sha256:f6ffc1c38e412b81113598d9ace10c3fbb7420d7f5155920777a8d6c24e61729_amd64",
                  "product_id": "quay/quay-rhel8@sha256:f6ffc1c38e412b81113598d9ace10c3fbb7420d7f5155920777a8d6c24e61729_amd64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/quay-rhel8@sha256:f6ffc1c38e412b81113598d9ace10c3fbb7420d7f5155920777a8d6c24e61729?arch=amd64\u0026repository_url=registry.redhat.io/quay/quay-rhel8\u0026tag=v3.12.12-11"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "amd64"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "quay/quay-bridge-operator-bundle@sha256:6bd8b2b1763f64591ce18d5d5cda64bedb28f50f334ed959ca650722d58d8b4f_ppc64le",
                "product": {
                  "name": "quay/quay-bridge-operator-bundle@sha256:6bd8b2b1763f64591ce18d5d5cda64bedb28f50f334ed959ca650722d58d8b4f_ppc64le",
                  "product_id": "quay/quay-bridge-operator-bundle@sha256:6bd8b2b1763f64591ce18d5d5cda64bedb28f50f334ed959ca650722d58d8b4f_ppc64le",
                  "product_identification_helper": {
                    "purl": "pkg:oci/quay-bridge-operator-bundle@sha256:6bd8b2b1763f64591ce18d5d5cda64bedb28f50f334ed959ca650722d58d8b4f?arch=ppc64le\u0026repository_url=registry.redhat.io/quay/quay-bridge-operator-bundle\u0026tag=v3.12.12-4"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "quay/quay-bridge-operator-rhel8@sha256:10614cb306ee729afd0a3227ac31a419124f801fc8dc32a93d311beb90354611_ppc64le",
                "product": {
                  "name": "quay/quay-bridge-operator-rhel8@sha256:10614cb306ee729afd0a3227ac31a419124f801fc8dc32a93d311beb90354611_ppc64le",
                  "product_id": "quay/quay-bridge-operator-rhel8@sha256:10614cb306ee729afd0a3227ac31a419124f801fc8dc32a93d311beb90354611_ppc64le",
                  "product_identification_helper": {
                    "purl": "pkg:oci/quay-bridge-operator-rhel8@sha256:10614cb306ee729afd0a3227ac31a419124f801fc8dc32a93d311beb90354611?arch=ppc64le\u0026repository_url=registry.redhat.io/quay/quay-bridge-operator-rhel8\u0026tag=v3.12.12-3"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "quay/quay-builder-rhel8@sha256:5114a2d9f7c0116f85b27fe39a919eae0113a76c5b9d6d9beb8553c7358b43c2_ppc64le",
                "product": {
                  "name": "quay/quay-builder-rhel8@sha256:5114a2d9f7c0116f85b27fe39a919eae0113a76c5b9d6d9beb8553c7358b43c2_ppc64le",
                  "product_id": "quay/quay-builder-rhel8@sha256:5114a2d9f7c0116f85b27fe39a919eae0113a76c5b9d6d9beb8553c7358b43c2_ppc64le",
                  "product_identification_helper": {
                    "purl": "pkg:oci/quay-builder-rhel8@sha256:5114a2d9f7c0116f85b27fe39a919eae0113a76c5b9d6d9beb8553c7358b43c2?arch=ppc64le\u0026repository_url=registry.redhat.io/quay/quay-builder-rhel8\u0026tag=v3.12.12-3"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "quay/quay-builder-qemu-rhcos-rhel8@sha256:9e589ef110d149c733fa8f2e51534e5e0d652958fb24626ee4f0ff7d49ebd6a6_ppc64le",
                "product": {
                  "name": "quay/quay-builder-qemu-rhcos-rhel8@sha256:9e589ef110d149c733fa8f2e51534e5e0d652958fb24626ee4f0ff7d49ebd6a6_ppc64le",
                  "product_id": "quay/quay-builder-qemu-rhcos-rhel8@sha256:9e589ef110d149c733fa8f2e51534e5e0d652958fb24626ee4f0ff7d49ebd6a6_ppc64le",
                  "product_identification_helper": {
                    "purl": "pkg:oci/quay-builder-qemu-rhcos-rhel8@sha256:9e589ef110d149c733fa8f2e51534e5e0d652958fb24626ee4f0ff7d49ebd6a6?arch=ppc64le\u0026repository_url=registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8\u0026tag=v3.12.12-3"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "quay/clair-rhel8@sha256:e06917042d4df095767c57e8b7032a90978842ed5c050b5d224131e737fc937f_ppc64le",
                "product": {
                  "name": "quay/clair-rhel8@sha256:e06917042d4df095767c57e8b7032a90978842ed5c050b5d224131e737fc937f_ppc64le",
                  "product_id": "quay/clair-rhel8@sha256:e06917042d4df095767c57e8b7032a90978842ed5c050b5d224131e737fc937f_ppc64le",
                  "product_identification_helper": {
                    "purl": "pkg:oci/clair-rhel8@sha256:e06917042d4df095767c57e8b7032a90978842ed5c050b5d224131e737fc937f?arch=ppc64le\u0026repository_url=registry.redhat.io/quay/clair-rhel8\u0026tag=v3.12.12-3"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "quay/quay-container-security-operator-bundle@sha256:4118ac24588b6b5675d71a238e7b2882227c5b6b249fd3cadb8cc64235d6f81c_ppc64le",
                "product": {
                  "name": "quay/quay-container-security-operator-bundle@sha256:4118ac24588b6b5675d71a238e7b2882227c5b6b249fd3cadb8cc64235d6f81c_ppc64le",
                  "product_id": "quay/quay-container-security-operator-bundle@sha256:4118ac24588b6b5675d71a238e7b2882227c5b6b249fd3cadb8cc64235d6f81c_ppc64le",
                  "product_identification_helper": {
                    "purl": "pkg:oci/quay-container-security-operator-bundle@sha256:4118ac24588b6b5675d71a238e7b2882227c5b6b249fd3cadb8cc64235d6f81c?arch=ppc64le\u0026repository_url=registry.redhat.io/quay/quay-container-security-operator-bundle\u0026tag=v3.12.12-3"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "quay/quay-container-security-operator-rhel8@sha256:d71b24b4b7cc4aa165fab6e06c3ee7c2cff3f5da3cd0b93faffc3be6ac55a5d2_ppc64le",
                "product": {
                  "name": "quay/quay-container-security-operator-rhel8@sha256:d71b24b4b7cc4aa165fab6e06c3ee7c2cff3f5da3cd0b93faffc3be6ac55a5d2_ppc64le",
                  "product_id": "quay/quay-container-security-operator-rhel8@sha256:d71b24b4b7cc4aa165fab6e06c3ee7c2cff3f5da3cd0b93faffc3be6ac55a5d2_ppc64le",
                  "product_identification_helper": {
                    "purl": "pkg:oci/quay-container-security-operator-rhel8@sha256:d71b24b4b7cc4aa165fab6e06c3ee7c2cff3f5da3cd0b93faffc3be6ac55a5d2?arch=ppc64le\u0026repository_url=registry.redhat.io/quay/quay-container-security-operator-rhel8\u0026tag=v3.12.12-3"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "quay/quay-operator-bundle@sha256:ef7c78058382c87b2c6dcc94fd98c7fe16679955cc3b27def8166b0dacc5a657_ppc64le",
                "product": {
                  "name": "quay/quay-operator-bundle@sha256:ef7c78058382c87b2c6dcc94fd98c7fe16679955cc3b27def8166b0dacc5a657_ppc64le",
                  "product_id": "quay/quay-operator-bundle@sha256:ef7c78058382c87b2c6dcc94fd98c7fe16679955cc3b27def8166b0dacc5a657_ppc64le",
                  "product_identification_helper": {
                    "purl": "pkg:oci/quay-operator-bundle@sha256:ef7c78058382c87b2c6dcc94fd98c7fe16679955cc3b27def8166b0dacc5a657?arch=ppc64le\u0026repository_url=registry.redhat.io/quay/quay-operator-bundle\u0026tag=v3.12.12-18"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "quay/quay-operator-rhel8@sha256:f47a67dd1b54c43496c36cd9e41319faf98f5ee3a154455f2b74ea1b048930bd_ppc64le",
                "product": {
                  "name": "quay/quay-operator-rhel8@sha256:f47a67dd1b54c43496c36cd9e41319faf98f5ee3a154455f2b74ea1b048930bd_ppc64le",
                  "product_id": "quay/quay-operator-rhel8@sha256:f47a67dd1b54c43496c36cd9e41319faf98f5ee3a154455f2b74ea1b048930bd_ppc64le",
                  "product_identification_helper": {
                    "purl": "pkg:oci/quay-operator-rhel8@sha256:f47a67dd1b54c43496c36cd9e41319faf98f5ee3a154455f2b74ea1b048930bd?arch=ppc64le\u0026repository_url=registry.redhat.io/quay/quay-operator-rhel8\u0026tag=v3.12.12-3"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "quay/quay-rhel8@sha256:a7414a79e3de34afcf40075573084f15edf60489f4b7e2454579a55d900ec487_ppc64le",
                "product": {
                  "name": "quay/quay-rhel8@sha256:a7414a79e3de34afcf40075573084f15edf60489f4b7e2454579a55d900ec487_ppc64le",
                  "product_id": "quay/quay-rhel8@sha256:a7414a79e3de34afcf40075573084f15edf60489f4b7e2454579a55d900ec487_ppc64le",
                  "product_identification_helper": {
                    "purl": "pkg:oci/quay-rhel8@sha256:a7414a79e3de34afcf40075573084f15edf60489f4b7e2454579a55d900ec487?arch=ppc64le\u0026repository_url=registry.redhat.io/quay/quay-rhel8\u0026tag=v3.12.12-11"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "ppc64le"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "quay/quay-bridge-operator-bundle@sha256:46bc4af0e35f1c7e15be1b1216c9a9729ac6a2cd6afb0e8eecf039b07d87ad19_s390x",
                "product": {
                  "name": "quay/quay-bridge-operator-bundle@sha256:46bc4af0e35f1c7e15be1b1216c9a9729ac6a2cd6afb0e8eecf039b07d87ad19_s390x",
                  "product_id": "quay/quay-bridge-operator-bundle@sha256:46bc4af0e35f1c7e15be1b1216c9a9729ac6a2cd6afb0e8eecf039b07d87ad19_s390x",
                  "product_identification_helper": {
                    "purl": "pkg:oci/quay-bridge-operator-bundle@sha256:46bc4af0e35f1c7e15be1b1216c9a9729ac6a2cd6afb0e8eecf039b07d87ad19?arch=s390x\u0026repository_url=registry.redhat.io/quay/quay-bridge-operator-bundle\u0026tag=v3.12.12-4"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "quay/quay-bridge-operator-rhel8@sha256:7fe583bfbc014cb8b6e68a71689b2f4e8c020f71278eaf36191b55266443c189_s390x",
                "product": {
                  "name": "quay/quay-bridge-operator-rhel8@sha256:7fe583bfbc014cb8b6e68a71689b2f4e8c020f71278eaf36191b55266443c189_s390x",
                  "product_id": "quay/quay-bridge-operator-rhel8@sha256:7fe583bfbc014cb8b6e68a71689b2f4e8c020f71278eaf36191b55266443c189_s390x",
                  "product_identification_helper": {
                    "purl": "pkg:oci/quay-bridge-operator-rhel8@sha256:7fe583bfbc014cb8b6e68a71689b2f4e8c020f71278eaf36191b55266443c189?arch=s390x\u0026repository_url=registry.redhat.io/quay/quay-bridge-operator-rhel8\u0026tag=v3.12.12-3"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "quay/quay-builder-rhel8@sha256:353eaa68bea50264aa31ead900df7b118148b58fa2411a4ecd155c960c028d13_s390x",
                "product": {
                  "name": "quay/quay-builder-rhel8@sha256:353eaa68bea50264aa31ead900df7b118148b58fa2411a4ecd155c960c028d13_s390x",
                  "product_id": "quay/quay-builder-rhel8@sha256:353eaa68bea50264aa31ead900df7b118148b58fa2411a4ecd155c960c028d13_s390x",
                  "product_identification_helper": {
                    "purl": "pkg:oci/quay-builder-rhel8@sha256:353eaa68bea50264aa31ead900df7b118148b58fa2411a4ecd155c960c028d13?arch=s390x\u0026repository_url=registry.redhat.io/quay/quay-builder-rhel8\u0026tag=v3.12.12-3"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "quay/quay-builder-qemu-rhcos-rhel8@sha256:1b36a4a98ebe17e66fab4b82fc483757bccfcc5aa6c8e1c01fc177c7a8b99506_s390x",
                "product": {
                  "name": "quay/quay-builder-qemu-rhcos-rhel8@sha256:1b36a4a98ebe17e66fab4b82fc483757bccfcc5aa6c8e1c01fc177c7a8b99506_s390x",
                  "product_id": "quay/quay-builder-qemu-rhcos-rhel8@sha256:1b36a4a98ebe17e66fab4b82fc483757bccfcc5aa6c8e1c01fc177c7a8b99506_s390x",
                  "product_identification_helper": {
                    "purl": "pkg:oci/quay-builder-qemu-rhcos-rhel8@sha256:1b36a4a98ebe17e66fab4b82fc483757bccfcc5aa6c8e1c01fc177c7a8b99506?arch=s390x\u0026repository_url=registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8\u0026tag=v3.12.12-3"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "quay/clair-rhel8@sha256:b6612509c1d373630490567108a00ceb01fba992f374a2bea00d0193ed2b836e_s390x",
                "product": {
                  "name": "quay/clair-rhel8@sha256:b6612509c1d373630490567108a00ceb01fba992f374a2bea00d0193ed2b836e_s390x",
                  "product_id": "quay/clair-rhel8@sha256:b6612509c1d373630490567108a00ceb01fba992f374a2bea00d0193ed2b836e_s390x",
                  "product_identification_helper": {
                    "purl": "pkg:oci/clair-rhel8@sha256:b6612509c1d373630490567108a00ceb01fba992f374a2bea00d0193ed2b836e?arch=s390x\u0026repository_url=registry.redhat.io/quay/clair-rhel8\u0026tag=v3.12.12-3"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "quay/quay-container-security-operator-bundle@sha256:1c171ba04cfb5edb5ee2c51a7723e52f4e793025df47f35b928c8c1d3314a8f2_s390x",
                "product": {
                  "name": "quay/quay-container-security-operator-bundle@sha256:1c171ba04cfb5edb5ee2c51a7723e52f4e793025df47f35b928c8c1d3314a8f2_s390x",
                  "product_id": "quay/quay-container-security-operator-bundle@sha256:1c171ba04cfb5edb5ee2c51a7723e52f4e793025df47f35b928c8c1d3314a8f2_s390x",
                  "product_identification_helper": {
                    "purl": "pkg:oci/quay-container-security-operator-bundle@sha256:1c171ba04cfb5edb5ee2c51a7723e52f4e793025df47f35b928c8c1d3314a8f2?arch=s390x\u0026repository_url=registry.redhat.io/quay/quay-container-security-operator-bundle\u0026tag=v3.12.12-3"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "quay/quay-container-security-operator-rhel8@sha256:a48077a1e13994284beb1e0d00af1e9282e22fa805f849d04aec6ff9664ccf04_s390x",
                "product": {
                  "name": "quay/quay-container-security-operator-rhel8@sha256:a48077a1e13994284beb1e0d00af1e9282e22fa805f849d04aec6ff9664ccf04_s390x",
                  "product_id": "quay/quay-container-security-operator-rhel8@sha256:a48077a1e13994284beb1e0d00af1e9282e22fa805f849d04aec6ff9664ccf04_s390x",
                  "product_identification_helper": {
                    "purl": "pkg:oci/quay-container-security-operator-rhel8@sha256:a48077a1e13994284beb1e0d00af1e9282e22fa805f849d04aec6ff9664ccf04?arch=s390x\u0026repository_url=registry.redhat.io/quay/quay-container-security-operator-rhel8\u0026tag=v3.12.12-3"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "quay/quay-operator-bundle@sha256:5dc4c6886ac17ffe09f50ca014e61bea68aa04c93a08dd4d3e20a80b4c1e86e4_s390x",
                "product": {
                  "name": "quay/quay-operator-bundle@sha256:5dc4c6886ac17ffe09f50ca014e61bea68aa04c93a08dd4d3e20a80b4c1e86e4_s390x",
                  "product_id": "quay/quay-operator-bundle@sha256:5dc4c6886ac17ffe09f50ca014e61bea68aa04c93a08dd4d3e20a80b4c1e86e4_s390x",
                  "product_identification_helper": {
                    "purl": "pkg:oci/quay-operator-bundle@sha256:5dc4c6886ac17ffe09f50ca014e61bea68aa04c93a08dd4d3e20a80b4c1e86e4?arch=s390x\u0026repository_url=registry.redhat.io/quay/quay-operator-bundle\u0026tag=v3.12.12-18"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "quay/quay-operator-rhel8@sha256:343a2a0581040be2bd824ee5eb0aedae53d2284ebddc3f5fdc5e39362f714d9a_s390x",
                "product": {
                  "name": "quay/quay-operator-rhel8@sha256:343a2a0581040be2bd824ee5eb0aedae53d2284ebddc3f5fdc5e39362f714d9a_s390x",
                  "product_id": "quay/quay-operator-rhel8@sha256:343a2a0581040be2bd824ee5eb0aedae53d2284ebddc3f5fdc5e39362f714d9a_s390x",
                  "product_identification_helper": {
                    "purl": "pkg:oci/quay-operator-rhel8@sha256:343a2a0581040be2bd824ee5eb0aedae53d2284ebddc3f5fdc5e39362f714d9a?arch=s390x\u0026repository_url=registry.redhat.io/quay/quay-operator-rhel8\u0026tag=v3.12.12-3"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "quay/quay-rhel8@sha256:5d36d48a5c8cb1d159d3afce09630d790b67e22ac6bd8d8e92c9ed353f6cb1c4_s390x",
                "product": {
                  "name": "quay/quay-rhel8@sha256:5d36d48a5c8cb1d159d3afce09630d790b67e22ac6bd8d8e92c9ed353f6cb1c4_s390x",
                  "product_id": "quay/quay-rhel8@sha256:5d36d48a5c8cb1d159d3afce09630d790b67e22ac6bd8d8e92c9ed353f6cb1c4_s390x",
                  "product_identification_helper": {
                    "purl": "pkg:oci/quay-rhel8@sha256:5d36d48a5c8cb1d159d3afce09630d790b67e22ac6bd8d8e92c9ed353f6cb1c4?arch=s390x\u0026repository_url=registry.redhat.io/quay/quay-rhel8\u0026tag=v3.12.12-11"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "s390x"
          }
        ],
        "category": "vendor",
        "name": "Red Hat"
      }
    ],
    "relationships": [
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "quay/clair-rhel8@sha256:b073e898f754a957128036c741b95e5f3f6bbc98c28016c4f114c42714d1aaba_amd64 as a component of Quay v3",
          "product_id": "8Base-Quay-3:quay/clair-rhel8@sha256:b073e898f754a957128036c741b95e5f3f6bbc98c28016c4f114c42714d1aaba_amd64"
        },
        "product_reference": "quay/clair-rhel8@sha256:b073e898f754a957128036c741b95e5f3f6bbc98c28016c4f114c42714d1aaba_amd64",
        "relates_to_product_reference": "8Base-Quay-3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "quay/clair-rhel8@sha256:b6612509c1d373630490567108a00ceb01fba992f374a2bea00d0193ed2b836e_s390x as a component of Quay v3",
          "product_id": "8Base-Quay-3:quay/clair-rhel8@sha256:b6612509c1d373630490567108a00ceb01fba992f374a2bea00d0193ed2b836e_s390x"
        },
        "product_reference": "quay/clair-rhel8@sha256:b6612509c1d373630490567108a00ceb01fba992f374a2bea00d0193ed2b836e_s390x",
        "relates_to_product_reference": "8Base-Quay-3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "quay/clair-rhel8@sha256:e06917042d4df095767c57e8b7032a90978842ed5c050b5d224131e737fc937f_ppc64le as a component of Quay v3",
          "product_id": "8Base-Quay-3:quay/clair-rhel8@sha256:e06917042d4df095767c57e8b7032a90978842ed5c050b5d224131e737fc937f_ppc64le"
        },
        "product_reference": "quay/clair-rhel8@sha256:e06917042d4df095767c57e8b7032a90978842ed5c050b5d224131e737fc937f_ppc64le",
        "relates_to_product_reference": "8Base-Quay-3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "quay/quay-bridge-operator-bundle@sha256:46bc4af0e35f1c7e15be1b1216c9a9729ac6a2cd6afb0e8eecf039b07d87ad19_s390x as a component of Quay v3",
          "product_id": "8Base-Quay-3:quay/quay-bridge-operator-bundle@sha256:46bc4af0e35f1c7e15be1b1216c9a9729ac6a2cd6afb0e8eecf039b07d87ad19_s390x"
        },
        "product_reference": "quay/quay-bridge-operator-bundle@sha256:46bc4af0e35f1c7e15be1b1216c9a9729ac6a2cd6afb0e8eecf039b07d87ad19_s390x",
        "relates_to_product_reference": "8Base-Quay-3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "quay/quay-bridge-operator-bundle@sha256:4c4c98b6cecd51c6644eb79b85789b7ebbcdc662edbb66ce435ea3b5e58d9273_amd64 as a component of Quay v3",
          "product_id": "8Base-Quay-3:quay/quay-bridge-operator-bundle@sha256:4c4c98b6cecd51c6644eb79b85789b7ebbcdc662edbb66ce435ea3b5e58d9273_amd64"
        },
        "product_reference": "quay/quay-bridge-operator-bundle@sha256:4c4c98b6cecd51c6644eb79b85789b7ebbcdc662edbb66ce435ea3b5e58d9273_amd64",
        "relates_to_product_reference": "8Base-Quay-3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "quay/quay-bridge-operator-bundle@sha256:6bd8b2b1763f64591ce18d5d5cda64bedb28f50f334ed959ca650722d58d8b4f_ppc64le as a component of Quay v3",
          "product_id": "8Base-Quay-3:quay/quay-bridge-operator-bundle@sha256:6bd8b2b1763f64591ce18d5d5cda64bedb28f50f334ed959ca650722d58d8b4f_ppc64le"
        },
        "product_reference": "quay/quay-bridge-operator-bundle@sha256:6bd8b2b1763f64591ce18d5d5cda64bedb28f50f334ed959ca650722d58d8b4f_ppc64le",
        "relates_to_product_reference": "8Base-Quay-3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "quay/quay-bridge-operator-rhel8@sha256:10614cb306ee729afd0a3227ac31a419124f801fc8dc32a93d311beb90354611_ppc64le as a component of Quay v3",
          "product_id": "8Base-Quay-3:quay/quay-bridge-operator-rhel8@sha256:10614cb306ee729afd0a3227ac31a419124f801fc8dc32a93d311beb90354611_ppc64le"
        },
        "product_reference": "quay/quay-bridge-operator-rhel8@sha256:10614cb306ee729afd0a3227ac31a419124f801fc8dc32a93d311beb90354611_ppc64le",
        "relates_to_product_reference": "8Base-Quay-3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "quay/quay-bridge-operator-rhel8@sha256:47bb98ec66982da4a169ab85c67831a370c8beda4f998f6827f7d1718f221528_amd64 as a component of Quay v3",
          "product_id": "8Base-Quay-3:quay/quay-bridge-operator-rhel8@sha256:47bb98ec66982da4a169ab85c67831a370c8beda4f998f6827f7d1718f221528_amd64"
        },
        "product_reference": "quay/quay-bridge-operator-rhel8@sha256:47bb98ec66982da4a169ab85c67831a370c8beda4f998f6827f7d1718f221528_amd64",
        "relates_to_product_reference": "8Base-Quay-3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "quay/quay-bridge-operator-rhel8@sha256:7fe583bfbc014cb8b6e68a71689b2f4e8c020f71278eaf36191b55266443c189_s390x as a component of Quay v3",
          "product_id": "8Base-Quay-3:quay/quay-bridge-operator-rhel8@sha256:7fe583bfbc014cb8b6e68a71689b2f4e8c020f71278eaf36191b55266443c189_s390x"
        },
        "product_reference": "quay/quay-bridge-operator-rhel8@sha256:7fe583bfbc014cb8b6e68a71689b2f4e8c020f71278eaf36191b55266443c189_s390x",
        "relates_to_product_reference": "8Base-Quay-3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "quay/quay-builder-qemu-rhcos-rhel8@sha256:1b36a4a98ebe17e66fab4b82fc483757bccfcc5aa6c8e1c01fc177c7a8b99506_s390x as a component of Quay v3",
          "product_id": "8Base-Quay-3:quay/quay-builder-qemu-rhcos-rhel8@sha256:1b36a4a98ebe17e66fab4b82fc483757bccfcc5aa6c8e1c01fc177c7a8b99506_s390x"
        },
        "product_reference": "quay/quay-builder-qemu-rhcos-rhel8@sha256:1b36a4a98ebe17e66fab4b82fc483757bccfcc5aa6c8e1c01fc177c7a8b99506_s390x",
        "relates_to_product_reference": "8Base-Quay-3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "quay/quay-builder-qemu-rhcos-rhel8@sha256:9e589ef110d149c733fa8f2e51534e5e0d652958fb24626ee4f0ff7d49ebd6a6_ppc64le as a component of Quay v3",
          "product_id": "8Base-Quay-3:quay/quay-builder-qemu-rhcos-rhel8@sha256:9e589ef110d149c733fa8f2e51534e5e0d652958fb24626ee4f0ff7d49ebd6a6_ppc64le"
        },
        "product_reference": "quay/quay-builder-qemu-rhcos-rhel8@sha256:9e589ef110d149c733fa8f2e51534e5e0d652958fb24626ee4f0ff7d49ebd6a6_ppc64le",
        "relates_to_product_reference": "8Base-Quay-3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "quay/quay-builder-qemu-rhcos-rhel8@sha256:a6787b4ebf263864a444b6d24796612af57b572bb13b2aa6baaf8e8a257cc5c3_amd64 as a component of Quay v3",
          "product_id": "8Base-Quay-3:quay/quay-builder-qemu-rhcos-rhel8@sha256:a6787b4ebf263864a444b6d24796612af57b572bb13b2aa6baaf8e8a257cc5c3_amd64"
        },
        "product_reference": "quay/quay-builder-qemu-rhcos-rhel8@sha256:a6787b4ebf263864a444b6d24796612af57b572bb13b2aa6baaf8e8a257cc5c3_amd64",
        "relates_to_product_reference": "8Base-Quay-3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "quay/quay-builder-rhel8@sha256:353eaa68bea50264aa31ead900df7b118148b58fa2411a4ecd155c960c028d13_s390x as a component of Quay v3",
          "product_id": "8Base-Quay-3:quay/quay-builder-rhel8@sha256:353eaa68bea50264aa31ead900df7b118148b58fa2411a4ecd155c960c028d13_s390x"
        },
        "product_reference": "quay/quay-builder-rhel8@sha256:353eaa68bea50264aa31ead900df7b118148b58fa2411a4ecd155c960c028d13_s390x",
        "relates_to_product_reference": "8Base-Quay-3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "quay/quay-builder-rhel8@sha256:5114a2d9f7c0116f85b27fe39a919eae0113a76c5b9d6d9beb8553c7358b43c2_ppc64le as a component of Quay v3",
          "product_id": "8Base-Quay-3:quay/quay-builder-rhel8@sha256:5114a2d9f7c0116f85b27fe39a919eae0113a76c5b9d6d9beb8553c7358b43c2_ppc64le"
        },
        "product_reference": "quay/quay-builder-rhel8@sha256:5114a2d9f7c0116f85b27fe39a919eae0113a76c5b9d6d9beb8553c7358b43c2_ppc64le",
        "relates_to_product_reference": "8Base-Quay-3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "quay/quay-builder-rhel8@sha256:ea585ad957f5bbdb5aa886aebaae418cf132797cf0727608e2ae6ada739ba83d_amd64 as a component of Quay v3",
          "product_id": "8Base-Quay-3:quay/quay-builder-rhel8@sha256:ea585ad957f5bbdb5aa886aebaae418cf132797cf0727608e2ae6ada739ba83d_amd64"
        },
        "product_reference": "quay/quay-builder-rhel8@sha256:ea585ad957f5bbdb5aa886aebaae418cf132797cf0727608e2ae6ada739ba83d_amd64",
        "relates_to_product_reference": "8Base-Quay-3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "quay/quay-container-security-operator-bundle@sha256:1c171ba04cfb5edb5ee2c51a7723e52f4e793025df47f35b928c8c1d3314a8f2_s390x as a component of Quay v3",
          "product_id": "8Base-Quay-3:quay/quay-container-security-operator-bundle@sha256:1c171ba04cfb5edb5ee2c51a7723e52f4e793025df47f35b928c8c1d3314a8f2_s390x"
        },
        "product_reference": "quay/quay-container-security-operator-bundle@sha256:1c171ba04cfb5edb5ee2c51a7723e52f4e793025df47f35b928c8c1d3314a8f2_s390x",
        "relates_to_product_reference": "8Base-Quay-3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "quay/quay-container-security-operator-bundle@sha256:4118ac24588b6b5675d71a238e7b2882227c5b6b249fd3cadb8cc64235d6f81c_ppc64le as a component of Quay v3",
          "product_id": "8Base-Quay-3:quay/quay-container-security-operator-bundle@sha256:4118ac24588b6b5675d71a238e7b2882227c5b6b249fd3cadb8cc64235d6f81c_ppc64le"
        },
        "product_reference": "quay/quay-container-security-operator-bundle@sha256:4118ac24588b6b5675d71a238e7b2882227c5b6b249fd3cadb8cc64235d6f81c_ppc64le",
        "relates_to_product_reference": "8Base-Quay-3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "quay/quay-container-security-operator-bundle@sha256:d17af97462de060dc21f997dac973d9f895ce91f80821f1a810d93dbcbda31e3_amd64 as a component of Quay v3",
          "product_id": "8Base-Quay-3:quay/quay-container-security-operator-bundle@sha256:d17af97462de060dc21f997dac973d9f895ce91f80821f1a810d93dbcbda31e3_amd64"
        },
        "product_reference": "quay/quay-container-security-operator-bundle@sha256:d17af97462de060dc21f997dac973d9f895ce91f80821f1a810d93dbcbda31e3_amd64",
        "relates_to_product_reference": "8Base-Quay-3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "quay/quay-container-security-operator-rhel8@sha256:4fb11329cbb4b41de5a5fbae820d95b5610eea097215f3dad851fb7dd573a11b_amd64 as a component of Quay v3",
          "product_id": "8Base-Quay-3:quay/quay-container-security-operator-rhel8@sha256:4fb11329cbb4b41de5a5fbae820d95b5610eea097215f3dad851fb7dd573a11b_amd64"
        },
        "product_reference": "quay/quay-container-security-operator-rhel8@sha256:4fb11329cbb4b41de5a5fbae820d95b5610eea097215f3dad851fb7dd573a11b_amd64",
        "relates_to_product_reference": "8Base-Quay-3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "quay/quay-container-security-operator-rhel8@sha256:a48077a1e13994284beb1e0d00af1e9282e22fa805f849d04aec6ff9664ccf04_s390x as a component of Quay v3",
          "product_id": "8Base-Quay-3:quay/quay-container-security-operator-rhel8@sha256:a48077a1e13994284beb1e0d00af1e9282e22fa805f849d04aec6ff9664ccf04_s390x"
        },
        "product_reference": "quay/quay-container-security-operator-rhel8@sha256:a48077a1e13994284beb1e0d00af1e9282e22fa805f849d04aec6ff9664ccf04_s390x",
        "relates_to_product_reference": "8Base-Quay-3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "quay/quay-container-security-operator-rhel8@sha256:d71b24b4b7cc4aa165fab6e06c3ee7c2cff3f5da3cd0b93faffc3be6ac55a5d2_ppc64le as a component of Quay v3",
          "product_id": "8Base-Quay-3:quay/quay-container-security-operator-rhel8@sha256:d71b24b4b7cc4aa165fab6e06c3ee7c2cff3f5da3cd0b93faffc3be6ac55a5d2_ppc64le"
        },
        "product_reference": "quay/quay-container-security-operator-rhel8@sha256:d71b24b4b7cc4aa165fab6e06c3ee7c2cff3f5da3cd0b93faffc3be6ac55a5d2_ppc64le",
        "relates_to_product_reference": "8Base-Quay-3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "quay/quay-operator-bundle@sha256:28e37ec35de1307405264cd4f79aaa6ce4d4ecbd6cbc27f4fef5db415c678d64_amd64 as a component of Quay v3",
          "product_id": "8Base-Quay-3:quay/quay-operator-bundle@sha256:28e37ec35de1307405264cd4f79aaa6ce4d4ecbd6cbc27f4fef5db415c678d64_amd64"
        },
        "product_reference": "quay/quay-operator-bundle@sha256:28e37ec35de1307405264cd4f79aaa6ce4d4ecbd6cbc27f4fef5db415c678d64_amd64",
        "relates_to_product_reference": "8Base-Quay-3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "quay/quay-operator-bundle@sha256:5dc4c6886ac17ffe09f50ca014e61bea68aa04c93a08dd4d3e20a80b4c1e86e4_s390x as a component of Quay v3",
          "product_id": "8Base-Quay-3:quay/quay-operator-bundle@sha256:5dc4c6886ac17ffe09f50ca014e61bea68aa04c93a08dd4d3e20a80b4c1e86e4_s390x"
        },
        "product_reference": "quay/quay-operator-bundle@sha256:5dc4c6886ac17ffe09f50ca014e61bea68aa04c93a08dd4d3e20a80b4c1e86e4_s390x",
        "relates_to_product_reference": "8Base-Quay-3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "quay/quay-operator-bundle@sha256:ef7c78058382c87b2c6dcc94fd98c7fe16679955cc3b27def8166b0dacc5a657_ppc64le as a component of Quay v3",
          "product_id": "8Base-Quay-3:quay/quay-operator-bundle@sha256:ef7c78058382c87b2c6dcc94fd98c7fe16679955cc3b27def8166b0dacc5a657_ppc64le"
        },
        "product_reference": "quay/quay-operator-bundle@sha256:ef7c78058382c87b2c6dcc94fd98c7fe16679955cc3b27def8166b0dacc5a657_ppc64le",
        "relates_to_product_reference": "8Base-Quay-3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "quay/quay-operator-rhel8@sha256:343a2a0581040be2bd824ee5eb0aedae53d2284ebddc3f5fdc5e39362f714d9a_s390x as a component of Quay v3",
          "product_id": "8Base-Quay-3:quay/quay-operator-rhel8@sha256:343a2a0581040be2bd824ee5eb0aedae53d2284ebddc3f5fdc5e39362f714d9a_s390x"
        },
        "product_reference": "quay/quay-operator-rhel8@sha256:343a2a0581040be2bd824ee5eb0aedae53d2284ebddc3f5fdc5e39362f714d9a_s390x",
        "relates_to_product_reference": "8Base-Quay-3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "quay/quay-operator-rhel8@sha256:b6ceb858f6a9341f249a71216f865519be3ccd011e2a7d7c26d6b7d4c0071393_amd64 as a component of Quay v3",
          "product_id": "8Base-Quay-3:quay/quay-operator-rhel8@sha256:b6ceb858f6a9341f249a71216f865519be3ccd011e2a7d7c26d6b7d4c0071393_amd64"
        },
        "product_reference": "quay/quay-operator-rhel8@sha256:b6ceb858f6a9341f249a71216f865519be3ccd011e2a7d7c26d6b7d4c0071393_amd64",
        "relates_to_product_reference": "8Base-Quay-3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "quay/quay-operator-rhel8@sha256:f47a67dd1b54c43496c36cd9e41319faf98f5ee3a154455f2b74ea1b048930bd_ppc64le as a component of Quay v3",
          "product_id": "8Base-Quay-3:quay/quay-operator-rhel8@sha256:f47a67dd1b54c43496c36cd9e41319faf98f5ee3a154455f2b74ea1b048930bd_ppc64le"
        },
        "product_reference": "quay/quay-operator-rhel8@sha256:f47a67dd1b54c43496c36cd9e41319faf98f5ee3a154455f2b74ea1b048930bd_ppc64le",
        "relates_to_product_reference": "8Base-Quay-3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "quay/quay-rhel8@sha256:5d36d48a5c8cb1d159d3afce09630d790b67e22ac6bd8d8e92c9ed353f6cb1c4_s390x as a component of Quay v3",
          "product_id": "8Base-Quay-3:quay/quay-rhel8@sha256:5d36d48a5c8cb1d159d3afce09630d790b67e22ac6bd8d8e92c9ed353f6cb1c4_s390x"
        },
        "product_reference": "quay/quay-rhel8@sha256:5d36d48a5c8cb1d159d3afce09630d790b67e22ac6bd8d8e92c9ed353f6cb1c4_s390x",
        "relates_to_product_reference": "8Base-Quay-3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "quay/quay-rhel8@sha256:a7414a79e3de34afcf40075573084f15edf60489f4b7e2454579a55d900ec487_ppc64le as a component of Quay v3",
          "product_id": "8Base-Quay-3:quay/quay-rhel8@sha256:a7414a79e3de34afcf40075573084f15edf60489f4b7e2454579a55d900ec487_ppc64le"
        },
        "product_reference": "quay/quay-rhel8@sha256:a7414a79e3de34afcf40075573084f15edf60489f4b7e2454579a55d900ec487_ppc64le",
        "relates_to_product_reference": "8Base-Quay-3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "quay/quay-rhel8@sha256:f6ffc1c38e412b81113598d9ace10c3fbb7420d7f5155920777a8d6c24e61729_amd64 as a component of Quay v3",
          "product_id": "8Base-Quay-3:quay/quay-rhel8@sha256:f6ffc1c38e412b81113598d9ace10c3fbb7420d7f5155920777a8d6c24e61729_amd64"
        },
        "product_reference": "quay/quay-rhel8@sha256:f6ffc1c38e412b81113598d9ace10c3fbb7420d7f5155920777a8d6c24e61729_amd64",
        "relates_to_product_reference": "8Base-Quay-3"
      }
    ]
  },
  "vulnerabilities": [
    {
      "cve": "CVE-2025-32023",
      "cwe": {
        "id": "CWE-787",
        "name": "Out-of-bounds Write"
      },
      "discovery_date": "2025-07-07T16:01:22.982604+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2376858"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in Redis. This flaw allows an authenticated user to trigger an integer overflow by sending a specially crafted string, resulting in a stack or heap out-of-bounds write during hyperloglog operations. This issue potentially results in remote code execution.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "redis: Redis Hyperloglog Out-of-Bounds Write Vulnerability",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "This flaw can only be exploited by an authenticated attacker when the Redis server has hyperloglog operations implemented, limiting the impact of this issue.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "8Base-Quay-3:quay/clair-rhel8@sha256:b073e898f754a957128036c741b95e5f3f6bbc98c28016c4f114c42714d1aaba_amd64",
          "8Base-Quay-3:quay/clair-rhel8@sha256:b6612509c1d373630490567108a00ceb01fba992f374a2bea00d0193ed2b836e_s390x",
          "8Base-Quay-3:quay/clair-rhel8@sha256:e06917042d4df095767c57e8b7032a90978842ed5c050b5d224131e737fc937f_ppc64le",
          "8Base-Quay-3:quay/quay-bridge-operator-bundle@sha256:46bc4af0e35f1c7e15be1b1216c9a9729ac6a2cd6afb0e8eecf039b07d87ad19_s390x",
          "8Base-Quay-3:quay/quay-bridge-operator-bundle@sha256:4c4c98b6cecd51c6644eb79b85789b7ebbcdc662edbb66ce435ea3b5e58d9273_amd64",
          "8Base-Quay-3:quay/quay-bridge-operator-bundle@sha256:6bd8b2b1763f64591ce18d5d5cda64bedb28f50f334ed959ca650722d58d8b4f_ppc64le",
          "8Base-Quay-3:quay/quay-bridge-operator-rhel8@sha256:10614cb306ee729afd0a3227ac31a419124f801fc8dc32a93d311beb90354611_ppc64le",
          "8Base-Quay-3:quay/quay-bridge-operator-rhel8@sha256:47bb98ec66982da4a169ab85c67831a370c8beda4f998f6827f7d1718f221528_amd64",
          "8Base-Quay-3:quay/quay-bridge-operator-rhel8@sha256:7fe583bfbc014cb8b6e68a71689b2f4e8c020f71278eaf36191b55266443c189_s390x",
          "8Base-Quay-3:quay/quay-builder-qemu-rhcos-rhel8@sha256:1b36a4a98ebe17e66fab4b82fc483757bccfcc5aa6c8e1c01fc177c7a8b99506_s390x",
          "8Base-Quay-3:quay/quay-builder-qemu-rhcos-rhel8@sha256:9e589ef110d149c733fa8f2e51534e5e0d652958fb24626ee4f0ff7d49ebd6a6_ppc64le",
          "8Base-Quay-3:quay/quay-builder-qemu-rhcos-rhel8@sha256:a6787b4ebf263864a444b6d24796612af57b572bb13b2aa6baaf8e8a257cc5c3_amd64",
          "8Base-Quay-3:quay/quay-builder-rhel8@sha256:353eaa68bea50264aa31ead900df7b118148b58fa2411a4ecd155c960c028d13_s390x",
          "8Base-Quay-3:quay/quay-builder-rhel8@sha256:5114a2d9f7c0116f85b27fe39a919eae0113a76c5b9d6d9beb8553c7358b43c2_ppc64le",
          "8Base-Quay-3:quay/quay-builder-rhel8@sha256:ea585ad957f5bbdb5aa886aebaae418cf132797cf0727608e2ae6ada739ba83d_amd64",
          "8Base-Quay-3:quay/quay-container-security-operator-bundle@sha256:1c171ba04cfb5edb5ee2c51a7723e52f4e793025df47f35b928c8c1d3314a8f2_s390x",
          "8Base-Quay-3:quay/quay-container-security-operator-bundle@sha256:4118ac24588b6b5675d71a238e7b2882227c5b6b249fd3cadb8cc64235d6f81c_ppc64le",
          "8Base-Quay-3:quay/quay-container-security-operator-bundle@sha256:d17af97462de060dc21f997dac973d9f895ce91f80821f1a810d93dbcbda31e3_amd64",
          "8Base-Quay-3:quay/quay-container-security-operator-rhel8@sha256:4fb11329cbb4b41de5a5fbae820d95b5610eea097215f3dad851fb7dd573a11b_amd64",
          "8Base-Quay-3:quay/quay-container-security-operator-rhel8@sha256:a48077a1e13994284beb1e0d00af1e9282e22fa805f849d04aec6ff9664ccf04_s390x",
          "8Base-Quay-3:quay/quay-container-security-operator-rhel8@sha256:d71b24b4b7cc4aa165fab6e06c3ee7c2cff3f5da3cd0b93faffc3be6ac55a5d2_ppc64le",
          "8Base-Quay-3:quay/quay-operator-bundle@sha256:28e37ec35de1307405264cd4f79aaa6ce4d4ecbd6cbc27f4fef5db415c678d64_amd64",
          "8Base-Quay-3:quay/quay-operator-bundle@sha256:5dc4c6886ac17ffe09f50ca014e61bea68aa04c93a08dd4d3e20a80b4c1e86e4_s390x",
          "8Base-Quay-3:quay/quay-operator-bundle@sha256:ef7c78058382c87b2c6dcc94fd98c7fe16679955cc3b27def8166b0dacc5a657_ppc64le",
          "8Base-Quay-3:quay/quay-operator-rhel8@sha256:343a2a0581040be2bd824ee5eb0aedae53d2284ebddc3f5fdc5e39362f714d9a_s390x",
          "8Base-Quay-3:quay/quay-operator-rhel8@sha256:b6ceb858f6a9341f249a71216f865519be3ccd011e2a7d7c26d6b7d4c0071393_amd64",
          "8Base-Quay-3:quay/quay-operator-rhel8@sha256:f47a67dd1b54c43496c36cd9e41319faf98f5ee3a154455f2b74ea1b048930bd_ppc64le",
          "8Base-Quay-3:quay/quay-rhel8@sha256:5d36d48a5c8cb1d159d3afce09630d790b67e22ac6bd8d8e92c9ed353f6cb1c4_s390x",
          "8Base-Quay-3:quay/quay-rhel8@sha256:a7414a79e3de34afcf40075573084f15edf60489f4b7e2454579a55d900ec487_ppc64le",
          "8Base-Quay-3:quay/quay-rhel8@sha256:f6ffc1c38e412b81113598d9ace10c3fbb7420d7f5155920777a8d6c24e61729_amd64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2025-32023"
        },
        {
          "category": "external",
          "summary": "RHBZ#2376858",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2376858"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2025-32023",
          "url": "https://www.cve.org/CVERecord?id=CVE-2025-32023"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2025-32023",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2025-32023"
        },
        {
          "category": "external",
          "summary": "https://github.com/redis/redis/commit/50188747cbfe43528d2719399a2a3c9599169445",
          "url": "https://github.com/redis/redis/commit/50188747cbfe43528d2719399a2a3c9599169445"
        },
        {
          "category": "external",
          "summary": "https://github.com/redis/redis/releases/tag/6.2.19",
          "url": "https://github.com/redis/redis/releases/tag/6.2.19"
        },
        {
          "category": "external",
          "summary": "https://github.com/redis/redis/releases/tag/7.2.10",
          "url": "https://github.com/redis/redis/releases/tag/7.2.10"
        },
        {
          "category": "external",
          "summary": "https://github.com/redis/redis/releases/tag/7.4.5",
          "url": "https://github.com/redis/redis/releases/tag/7.4.5"
        },
        {
          "category": "external",
          "summary": "https://github.com/redis/redis/releases/tag/8.0.3",
          "url": "https://github.com/redis/redis/releases/tag/8.0.3"
        },
        {
          "category": "external",
          "summary": "https://github.com/redis/redis/security/advisories/GHSA-rp2m-q4j6-gr43",
          "url": "https://github.com/redis/redis/security/advisories/GHSA-rp2m-q4j6-gr43"
        }
      ],
      "release_date": "2025-07-07T15:22:19.155000+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2025-09-23T08:55:34+00:00",
          "details": "Before applying this update, make sure all previously released errata relevant to your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
          "product_ids": [
            "8Base-Quay-3:quay/clair-rhel8@sha256:b073e898f754a957128036c741b95e5f3f6bbc98c28016c4f114c42714d1aaba_amd64",
            "8Base-Quay-3:quay/clair-rhel8@sha256:b6612509c1d373630490567108a00ceb01fba992f374a2bea00d0193ed2b836e_s390x",
            "8Base-Quay-3:quay/clair-rhel8@sha256:e06917042d4df095767c57e8b7032a90978842ed5c050b5d224131e737fc937f_ppc64le",
            "8Base-Quay-3:quay/quay-bridge-operator-bundle@sha256:46bc4af0e35f1c7e15be1b1216c9a9729ac6a2cd6afb0e8eecf039b07d87ad19_s390x",
            "8Base-Quay-3:quay/quay-bridge-operator-bundle@sha256:4c4c98b6cecd51c6644eb79b85789b7ebbcdc662edbb66ce435ea3b5e58d9273_amd64",
            "8Base-Quay-3:quay/quay-bridge-operator-bundle@sha256:6bd8b2b1763f64591ce18d5d5cda64bedb28f50f334ed959ca650722d58d8b4f_ppc64le",
            "8Base-Quay-3:quay/quay-bridge-operator-rhel8@sha256:10614cb306ee729afd0a3227ac31a419124f801fc8dc32a93d311beb90354611_ppc64le",
            "8Base-Quay-3:quay/quay-bridge-operator-rhel8@sha256:47bb98ec66982da4a169ab85c67831a370c8beda4f998f6827f7d1718f221528_amd64",
            "8Base-Quay-3:quay/quay-bridge-operator-rhel8@sha256:7fe583bfbc014cb8b6e68a71689b2f4e8c020f71278eaf36191b55266443c189_s390x",
            "8Base-Quay-3:quay/quay-builder-qemu-rhcos-rhel8@sha256:1b36a4a98ebe17e66fab4b82fc483757bccfcc5aa6c8e1c01fc177c7a8b99506_s390x",
            "8Base-Quay-3:quay/quay-builder-qemu-rhcos-rhel8@sha256:9e589ef110d149c733fa8f2e51534e5e0d652958fb24626ee4f0ff7d49ebd6a6_ppc64le",
            "8Base-Quay-3:quay/quay-builder-qemu-rhcos-rhel8@sha256:a6787b4ebf263864a444b6d24796612af57b572bb13b2aa6baaf8e8a257cc5c3_amd64",
            "8Base-Quay-3:quay/quay-builder-rhel8@sha256:353eaa68bea50264aa31ead900df7b118148b58fa2411a4ecd155c960c028d13_s390x",
            "8Base-Quay-3:quay/quay-builder-rhel8@sha256:5114a2d9f7c0116f85b27fe39a919eae0113a76c5b9d6d9beb8553c7358b43c2_ppc64le",
            "8Base-Quay-3:quay/quay-builder-rhel8@sha256:ea585ad957f5bbdb5aa886aebaae418cf132797cf0727608e2ae6ada739ba83d_amd64",
            "8Base-Quay-3:quay/quay-container-security-operator-bundle@sha256:1c171ba04cfb5edb5ee2c51a7723e52f4e793025df47f35b928c8c1d3314a8f2_s390x",
            "8Base-Quay-3:quay/quay-container-security-operator-bundle@sha256:4118ac24588b6b5675d71a238e7b2882227c5b6b249fd3cadb8cc64235d6f81c_ppc64le",
            "8Base-Quay-3:quay/quay-container-security-operator-bundle@sha256:d17af97462de060dc21f997dac973d9f895ce91f80821f1a810d93dbcbda31e3_amd64",
            "8Base-Quay-3:quay/quay-container-security-operator-rhel8@sha256:4fb11329cbb4b41de5a5fbae820d95b5610eea097215f3dad851fb7dd573a11b_amd64",
            "8Base-Quay-3:quay/quay-container-security-operator-rhel8@sha256:a48077a1e13994284beb1e0d00af1e9282e22fa805f849d04aec6ff9664ccf04_s390x",
            "8Base-Quay-3:quay/quay-container-security-operator-rhel8@sha256:d71b24b4b7cc4aa165fab6e06c3ee7c2cff3f5da3cd0b93faffc3be6ac55a5d2_ppc64le",
            "8Base-Quay-3:quay/quay-operator-bundle@sha256:28e37ec35de1307405264cd4f79aaa6ce4d4ecbd6cbc27f4fef5db415c678d64_amd64",
            "8Base-Quay-3:quay/quay-operator-bundle@sha256:5dc4c6886ac17ffe09f50ca014e61bea68aa04c93a08dd4d3e20a80b4c1e86e4_s390x",
            "8Base-Quay-3:quay/quay-operator-bundle@sha256:ef7c78058382c87b2c6dcc94fd98c7fe16679955cc3b27def8166b0dacc5a657_ppc64le",
            "8Base-Quay-3:quay/quay-operator-rhel8@sha256:343a2a0581040be2bd824ee5eb0aedae53d2284ebddc3f5fdc5e39362f714d9a_s390x",
            "8Base-Quay-3:quay/quay-operator-rhel8@sha256:b6ceb858f6a9341f249a71216f865519be3ccd011e2a7d7c26d6b7d4c0071393_amd64",
            "8Base-Quay-3:quay/quay-operator-rhel8@sha256:f47a67dd1b54c43496c36cd9e41319faf98f5ee3a154455f2b74ea1b048930bd_ppc64le",
            "8Base-Quay-3:quay/quay-rhel8@sha256:5d36d48a5c8cb1d159d3afce09630d790b67e22ac6bd8d8e92c9ed353f6cb1c4_s390x",
            "8Base-Quay-3:quay/quay-rhel8@sha256:a7414a79e3de34afcf40075573084f15edf60489f4b7e2454579a55d900ec487_ppc64le",
            "8Base-Quay-3:quay/quay-rhel8@sha256:f6ffc1c38e412b81113598d9ace10c3fbb7420d7f5155920777a8d6c24e61729_amd64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHBA-2025:16395"
        },
        {
          "category": "workaround",
          "details": "Prevent users, specially unprivileged or untrusted users, to execute hyperloglog operations by using ACL to restrict hyperloglog commands.",
          "product_ids": [
            "8Base-Quay-3:quay/clair-rhel8@sha256:b073e898f754a957128036c741b95e5f3f6bbc98c28016c4f114c42714d1aaba_amd64",
            "8Base-Quay-3:quay/clair-rhel8@sha256:b6612509c1d373630490567108a00ceb01fba992f374a2bea00d0193ed2b836e_s390x",
            "8Base-Quay-3:quay/clair-rhel8@sha256:e06917042d4df095767c57e8b7032a90978842ed5c050b5d224131e737fc937f_ppc64le",
            "8Base-Quay-3:quay/quay-bridge-operator-bundle@sha256:46bc4af0e35f1c7e15be1b1216c9a9729ac6a2cd6afb0e8eecf039b07d87ad19_s390x",
            "8Base-Quay-3:quay/quay-bridge-operator-bundle@sha256:4c4c98b6cecd51c6644eb79b85789b7ebbcdc662edbb66ce435ea3b5e58d9273_amd64",
            "8Base-Quay-3:quay/quay-bridge-operator-bundle@sha256:6bd8b2b1763f64591ce18d5d5cda64bedb28f50f334ed959ca650722d58d8b4f_ppc64le",
            "8Base-Quay-3:quay/quay-bridge-operator-rhel8@sha256:10614cb306ee729afd0a3227ac31a419124f801fc8dc32a93d311beb90354611_ppc64le",
            "8Base-Quay-3:quay/quay-bridge-operator-rhel8@sha256:47bb98ec66982da4a169ab85c67831a370c8beda4f998f6827f7d1718f221528_amd64",
            "8Base-Quay-3:quay/quay-bridge-operator-rhel8@sha256:7fe583bfbc014cb8b6e68a71689b2f4e8c020f71278eaf36191b55266443c189_s390x",
            "8Base-Quay-3:quay/quay-builder-qemu-rhcos-rhel8@sha256:1b36a4a98ebe17e66fab4b82fc483757bccfcc5aa6c8e1c01fc177c7a8b99506_s390x",
            "8Base-Quay-3:quay/quay-builder-qemu-rhcos-rhel8@sha256:9e589ef110d149c733fa8f2e51534e5e0d652958fb24626ee4f0ff7d49ebd6a6_ppc64le",
            "8Base-Quay-3:quay/quay-builder-qemu-rhcos-rhel8@sha256:a6787b4ebf263864a444b6d24796612af57b572bb13b2aa6baaf8e8a257cc5c3_amd64",
            "8Base-Quay-3:quay/quay-builder-rhel8@sha256:353eaa68bea50264aa31ead900df7b118148b58fa2411a4ecd155c960c028d13_s390x",
            "8Base-Quay-3:quay/quay-builder-rhel8@sha256:5114a2d9f7c0116f85b27fe39a919eae0113a76c5b9d6d9beb8553c7358b43c2_ppc64le",
            "8Base-Quay-3:quay/quay-builder-rhel8@sha256:ea585ad957f5bbdb5aa886aebaae418cf132797cf0727608e2ae6ada739ba83d_amd64",
            "8Base-Quay-3:quay/quay-container-security-operator-bundle@sha256:1c171ba04cfb5edb5ee2c51a7723e52f4e793025df47f35b928c8c1d3314a8f2_s390x",
            "8Base-Quay-3:quay/quay-container-security-operator-bundle@sha256:4118ac24588b6b5675d71a238e7b2882227c5b6b249fd3cadb8cc64235d6f81c_ppc64le",
            "8Base-Quay-3:quay/quay-container-security-operator-bundle@sha256:d17af97462de060dc21f997dac973d9f895ce91f80821f1a810d93dbcbda31e3_amd64",
            "8Base-Quay-3:quay/quay-container-security-operator-rhel8@sha256:4fb11329cbb4b41de5a5fbae820d95b5610eea097215f3dad851fb7dd573a11b_amd64",
            "8Base-Quay-3:quay/quay-container-security-operator-rhel8@sha256:a48077a1e13994284beb1e0d00af1e9282e22fa805f849d04aec6ff9664ccf04_s390x",
            "8Base-Quay-3:quay/quay-container-security-operator-rhel8@sha256:d71b24b4b7cc4aa165fab6e06c3ee7c2cff3f5da3cd0b93faffc3be6ac55a5d2_ppc64le",
            "8Base-Quay-3:quay/quay-operator-bundle@sha256:28e37ec35de1307405264cd4f79aaa6ce4d4ecbd6cbc27f4fef5db415c678d64_amd64",
            "8Base-Quay-3:quay/quay-operator-bundle@sha256:5dc4c6886ac17ffe09f50ca014e61bea68aa04c93a08dd4d3e20a80b4c1e86e4_s390x",
            "8Base-Quay-3:quay/quay-operator-bundle@sha256:ef7c78058382c87b2c6dcc94fd98c7fe16679955cc3b27def8166b0dacc5a657_ppc64le",
            "8Base-Quay-3:quay/quay-operator-rhel8@sha256:343a2a0581040be2bd824ee5eb0aedae53d2284ebddc3f5fdc5e39362f714d9a_s390x",
            "8Base-Quay-3:quay/quay-operator-rhel8@sha256:b6ceb858f6a9341f249a71216f865519be3ccd011e2a7d7c26d6b7d4c0071393_amd64",
            "8Base-Quay-3:quay/quay-operator-rhel8@sha256:f47a67dd1b54c43496c36cd9e41319faf98f5ee3a154455f2b74ea1b048930bd_ppc64le",
            "8Base-Quay-3:quay/quay-rhel8@sha256:5d36d48a5c8cb1d159d3afce09630d790b67e22ac6bd8d8e92c9ed353f6cb1c4_s390x",
            "8Base-Quay-3:quay/quay-rhel8@sha256:a7414a79e3de34afcf40075573084f15edf60489f4b7e2454579a55d900ec487_ppc64le",
            "8Base-Quay-3:quay/quay-rhel8@sha256:f6ffc1c38e412b81113598d9ace10c3fbb7420d7f5155920777a8d6c24e61729_amd64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 8.8,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "LOW",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "8Base-Quay-3:quay/clair-rhel8@sha256:b073e898f754a957128036c741b95e5f3f6bbc98c28016c4f114c42714d1aaba_amd64",
            "8Base-Quay-3:quay/clair-rhel8@sha256:b6612509c1d373630490567108a00ceb01fba992f374a2bea00d0193ed2b836e_s390x",
            "8Base-Quay-3:quay/clair-rhel8@sha256:e06917042d4df095767c57e8b7032a90978842ed5c050b5d224131e737fc937f_ppc64le",
            "8Base-Quay-3:quay/quay-bridge-operator-bundle@sha256:46bc4af0e35f1c7e15be1b1216c9a9729ac6a2cd6afb0e8eecf039b07d87ad19_s390x",
            "8Base-Quay-3:quay/quay-bridge-operator-bundle@sha256:4c4c98b6cecd51c6644eb79b85789b7ebbcdc662edbb66ce435ea3b5e58d9273_amd64",
            "8Base-Quay-3:quay/quay-bridge-operator-bundle@sha256:6bd8b2b1763f64591ce18d5d5cda64bedb28f50f334ed959ca650722d58d8b4f_ppc64le",
            "8Base-Quay-3:quay/quay-bridge-operator-rhel8@sha256:10614cb306ee729afd0a3227ac31a419124f801fc8dc32a93d311beb90354611_ppc64le",
            "8Base-Quay-3:quay/quay-bridge-operator-rhel8@sha256:47bb98ec66982da4a169ab85c67831a370c8beda4f998f6827f7d1718f221528_amd64",
            "8Base-Quay-3:quay/quay-bridge-operator-rhel8@sha256:7fe583bfbc014cb8b6e68a71689b2f4e8c020f71278eaf36191b55266443c189_s390x",
            "8Base-Quay-3:quay/quay-builder-qemu-rhcos-rhel8@sha256:1b36a4a98ebe17e66fab4b82fc483757bccfcc5aa6c8e1c01fc177c7a8b99506_s390x",
            "8Base-Quay-3:quay/quay-builder-qemu-rhcos-rhel8@sha256:9e589ef110d149c733fa8f2e51534e5e0d652958fb24626ee4f0ff7d49ebd6a6_ppc64le",
            "8Base-Quay-3:quay/quay-builder-qemu-rhcos-rhel8@sha256:a6787b4ebf263864a444b6d24796612af57b572bb13b2aa6baaf8e8a257cc5c3_amd64",
            "8Base-Quay-3:quay/quay-builder-rhel8@sha256:353eaa68bea50264aa31ead900df7b118148b58fa2411a4ecd155c960c028d13_s390x",
            "8Base-Quay-3:quay/quay-builder-rhel8@sha256:5114a2d9f7c0116f85b27fe39a919eae0113a76c5b9d6d9beb8553c7358b43c2_ppc64le",
            "8Base-Quay-3:quay/quay-builder-rhel8@sha256:ea585ad957f5bbdb5aa886aebaae418cf132797cf0727608e2ae6ada739ba83d_amd64",
            "8Base-Quay-3:quay/quay-container-security-operator-bundle@sha256:1c171ba04cfb5edb5ee2c51a7723e52f4e793025df47f35b928c8c1d3314a8f2_s390x",
            "8Base-Quay-3:quay/quay-container-security-operator-bundle@sha256:4118ac24588b6b5675d71a238e7b2882227c5b6b249fd3cadb8cc64235d6f81c_ppc64le",
            "8Base-Quay-3:quay/quay-container-security-operator-bundle@sha256:d17af97462de060dc21f997dac973d9f895ce91f80821f1a810d93dbcbda31e3_amd64",
            "8Base-Quay-3:quay/quay-container-security-operator-rhel8@sha256:4fb11329cbb4b41de5a5fbae820d95b5610eea097215f3dad851fb7dd573a11b_amd64",
            "8Base-Quay-3:quay/quay-container-security-operator-rhel8@sha256:a48077a1e13994284beb1e0d00af1e9282e22fa805f849d04aec6ff9664ccf04_s390x",
            "8Base-Quay-3:quay/quay-container-security-operator-rhel8@sha256:d71b24b4b7cc4aa165fab6e06c3ee7c2cff3f5da3cd0b93faffc3be6ac55a5d2_ppc64le",
            "8Base-Quay-3:quay/quay-operator-bundle@sha256:28e37ec35de1307405264cd4f79aaa6ce4d4ecbd6cbc27f4fef5db415c678d64_amd64",
            "8Base-Quay-3:quay/quay-operator-bundle@sha256:5dc4c6886ac17ffe09f50ca014e61bea68aa04c93a08dd4d3e20a80b4c1e86e4_s390x",
            "8Base-Quay-3:quay/quay-operator-bundle@sha256:ef7c78058382c87b2c6dcc94fd98c7fe16679955cc3b27def8166b0dacc5a657_ppc64le",
            "8Base-Quay-3:quay/quay-operator-rhel8@sha256:343a2a0581040be2bd824ee5eb0aedae53d2284ebddc3f5fdc5e39362f714d9a_s390x",
            "8Base-Quay-3:quay/quay-operator-rhel8@sha256:b6ceb858f6a9341f249a71216f865519be3ccd011e2a7d7c26d6b7d4c0071393_amd64",
            "8Base-Quay-3:quay/quay-operator-rhel8@sha256:f47a67dd1b54c43496c36cd9e41319faf98f5ee3a154455f2b74ea1b048930bd_ppc64le",
            "8Base-Quay-3:quay/quay-rhel8@sha256:5d36d48a5c8cb1d159d3afce09630d790b67e22ac6bd8d8e92c9ed353f6cb1c4_s390x",
            "8Base-Quay-3:quay/quay-rhel8@sha256:a7414a79e3de34afcf40075573084f15edf60489f4b7e2454579a55d900ec487_ppc64le",
            "8Base-Quay-3:quay/quay-rhel8@sha256:f6ffc1c38e412b81113598d9ace10c3fbb7420d7f5155920777a8d6c24e61729_amd64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "redis: Redis Hyperloglog Out-of-Bounds Write Vulnerability"
    }
  ]
}

CVE-2025-32023 (GCVE-0-2025-32023)

Vulnerability from cvelistv5 – Published: 2025-07-07 15:22 – Updated: 2026-02-04 19:26

Title

Redis allows out of bounds writes in hyperloglog commands leading to RCE

Summary

Redis is an open source, in-memory database that persists on disk. From 2.8 to before 8.0.3, 7.4.5, 7.2.10, and 6.2.19, an authenticated user may use a specially crafted string to trigger a stack/heap out of bounds write on hyperloglog operations, potentially leading to remote code execution. The bug likely affects all Redis versions with hyperloglog operations implemented. This vulnerability is fixed in 8.0.3, 7.4.5, 7.2.10, and 6.2.19. An additional workaround to mitigate the problem without patching the redis-server executable is to prevent users from executing hyperloglog operations. This can be done using ACL to restrict HLL commands.

Severity

7 (High)


                        
                          CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H

SSVC

Exploitation: none Automatable: no Technical Impact: total

CISA Coordinator · CISA-ADP (v2.0.3)

Decision recorded 2025-07-07 15:43 UTC

CWE

CWE-680 - Integer Overflow to Buffer Overflow

Assigner

GitHub_M mitre root

References

7 references

URL	Tags
https://github.com/redis/redis/security/advisorie…	x_refsource_CONFIRM
https://github.com/redis/redis/commit/50188747cbf…	x_refsource_MISC
https://github.com/redis/redis/releases/tag/6.2.19	x_refsource_MISC
https://github.com/redis/redis/releases/tag/7.2.10	x_refsource_MISC
https://github.com/redis/redis/releases/tag/7.4.5	x_refsource_MISC
https://github.com/redis/redis/releases/tag/8.0.3	x_refsource_MISC
https://www.exploit-db.com/exploits/52477

Impacted products

1 product

Vendor	Product	Version
redis	redis	Affected: >= 8.0.0, < 8.0.3 Affected: >= 7.4-rc1, < 7.4.5 Affected: >= 7.0.0, < 7.2.10 Affected: >= 2.8.0, < 6.2.19

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2025-32023",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "total"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2025-07-07T15:43:02.576291Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2025-07-07T15:43:15.696Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      },
      {
        "providerMetadata": {
          "dateUpdated": "2026-02-04T19:26:46.239Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "url": "https://www.exploit-db.com/exploits/52477"
          }
        ],
        "title": "CVE Program Container",
        "x_generator": {
          "engine": "ADPogram 0.0.1"
        }
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "redis",
          "vendor": "redis",
          "versions": [
            {
              "status": "affected",
              "version": "\u003e= 8.0.0, \u003c 8.0.3"
            },
            {
              "status": "affected",
              "version": "\u003e= 7.4-rc1, \u003c 7.4.5"
            },
            {
              "status": "affected",
              "version": "\u003e= 7.0.0, \u003c 7.2.10"
            },
            {
              "status": "affected",
              "version": "\u003e= 2.8.0, \u003c 6.2.19"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "Redis is an open source, in-memory database that persists on disk. From 2.8 to before 8.0.3, 7.4.5, 7.2.10, and 6.2.19, an authenticated user may use a specially crafted string to trigger a stack/heap out of bounds write on hyperloglog operations, potentially leading to remote code execution. The bug likely affects all Redis versions with hyperloglog operations implemented. This vulnerability is fixed in 8.0.3, 7.4.5, 7.2.10, and 6.2.19. An additional workaround to mitigate the problem without patching the redis-server executable is to prevent users from executing hyperloglog operations. This can be done using ACL to restrict HLL commands."
        }
      ],
      "metrics": [
        {
          "cvssV3_1": {
            "attackComplexity": "HIGH",
            "attackVector": "LOCAL",
            "availabilityImpact": "HIGH",
            "baseScore": 7,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "LOW",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          }
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-680",
              "description": "CWE-680: Integer Overflow to Buffer Overflow",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2025-07-07T15:22:19.155Z",
        "orgId": "a0819718-46f1-4df5-94e2-005712e83aaa",
        "shortName": "GitHub_M"
      },
      "references": [
        {
          "name": "https://github.com/redis/redis/security/advisories/GHSA-rp2m-q4j6-gr43",
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://github.com/redis/redis/security/advisories/GHSA-rp2m-q4j6-gr43"
        },
        {
          "name": "https://github.com/redis/redis/commit/50188747cbfe43528d2719399a2a3c9599169445",
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://github.com/redis/redis/commit/50188747cbfe43528d2719399a2a3c9599169445"
        },
        {
          "name": "https://github.com/redis/redis/releases/tag/6.2.19",
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://github.com/redis/redis/releases/tag/6.2.19"
        },
        {
          "name": "https://github.com/redis/redis/releases/tag/7.2.10",
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://github.com/redis/redis/releases/tag/7.2.10"
        },
        {
          "name": "https://github.com/redis/redis/releases/tag/7.4.5",
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://github.com/redis/redis/releases/tag/7.4.5"
        },
        {
          "name": "https://github.com/redis/redis/releases/tag/8.0.3",
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://github.com/redis/redis/releases/tag/8.0.3"
        }
      ],
      "source": {
        "advisory": "GHSA-rp2m-q4j6-gr43",
        "discovery": "UNKNOWN"
      },
      "title": "Redis allows out of bounds writes in hyperloglog commands leading to RCE"
    }
  },
  "cveMetadata": {
    "assignerOrgId": "a0819718-46f1-4df5-94e2-005712e83aaa",
    "assignerShortName": "GitHub_M",
    "cveId": "CVE-2025-32023",
    "datePublished": "2025-07-07T15:22:19.155Z",
    "dateReserved": "2025-04-01T21:57:32.955Z",
    "dateUpdated": "2026-02-04T19:26:46.239Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

Sightings

Author	Source	Type	Date	Other

Nomenclature

Seen: The vulnerability was mentioned, discussed, or observed by the user.
Confirmed: The vulnerability has been validated from an analyst's perspective.
Published Proof of Concept: A public proof of concept is available for this vulnerability.
Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
Not confirmed: The user expressed doubt about the validity of the vulnerability.
Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.

Detection rules are retrieved from Rulezet.

The MITRE ATT&CK techniques below are AI-generated suggestions, inferred from the description of the vulnerability by the CIRCL/vulnerability-attack-technique-classification-roberta-base model, served locally by ML-Gateway. They have not been verified by an analyst and are provided for guidance only.
The approach is described in our paper Mapping CVEs to MITRE ATT&CK Techniques: A Curated Gold-Set Classifier and the Limits of LLM-Assisted Label Expansion.
Browse all ATT&CK techniques and the vulnerabilities related to each.

Related by attack behaviour

Vulnerabilities whose description is nearest to this one in the vector space of the CIRCL/vulnerability-attack-technique-biencoder model. This is a similarity search over the bi-encoder space (plain cosine), not a classification, and it has no measured accuracy.