Apache bRPC's Redis server command parser improperly accepts an empty RESP array as a command header. This flaw allows a remote unauthenticated attacker to send a malformed command that triggers an out-of-bounds write in the parser, leading to a crash of the bRPC process. The issue occurs before authentication, affecting deployments with Redis service enabled that accept untrusted Redis protocol traffic. The vulnerability is fixed in bRPC version 1.18.0 by rejecting empty RESP arrays and improving error handling.