Redis with TLS enabled has a use-after-free in tlsProcessPendingData() while handling the TLS pending-data list, reachable remotely without authentication. Exploitation may allow executing arbitrary Redis commands with the privileges of the redis-server process. Upgrade to 8.2.9, 8.4.6, 8.6.6, 8.8.2, or 8.10.1 to remediate.