QNAP QTS and QuTS hero Buffer Overflow Vulnerability Allowing Memory Modification or Process Crashes

A buffer overflow vulnerability has been identified in QNAP QTS and QuTS hero operating systems, specifically in versions 5.2.x. This vulnerability allows remote attackers with user access to modify memory or crash processes. The issue has been resolved in QTS 5.2.4.3079 build 20250321 and later, as well as in QuTS hero h5.2.4.3079 build 20250321 and later.

Impact

Exploitation of this vulnerability could lead to unauthorized memory modification or process crashes on the affected system.

Remediation

Users are advised to update to QTS 5.2.4.3079 build 20250321 or later, or to QuTS hero h5.2.4.3079 build 20250321 or later. Instructions for updating QTS or QuTS hero are available on the QNAP website.