Swoole Swoole-Source Integer Overflow Vulnerability in Hiredis Module

An integer overflow vulnerability has been identified in the Swoole Swoole-Source library, specifically within the Hiredis module, in versions prior to 6.0.2. This vulnerability arises in the 'sds.C' file, where inadequate safety measures during memory allocation can lead to heap corruption.

Impact

Exploitation of this vulnerability can cause heap corruption, potentially allowing for arbitrary code execution or other memory-related attacks.

Remediation

Users can upgrade to Swoole Swoole-Source version 6.0.2 or later to address this vulnerability.