Redis has a use-after-free vulnerability in the tlsProcessPendingData() function, which manages the TLS pending-data list when TLS support is enabled. This flaw allows a remote, unauthenticated attacker to potentially execute arbitrary commands with the privileges of the Redis server. The vulnerability affects multiple specific Redis package versions. The CVSS score is 7.1, indicating a medium severity level.