QNAP QTS and QuTS hero Buffer Overflow Vulnerability Allowing Memory Modification or Process Crashes

A buffer overflow vulnerability has been identified in multiple QNAP operating system versions, including QTS 5.2.x and QuTS hero h5.2.x and h5.3.x. If a remote attacker gains access to a user account, they can exploit this vulnerability to modify memory or crash processes.

Impact

Exploitation of this vulnerability allows for memory modification or process crashes.

Remediation

Users can update to QTS 5.2.7.3256 build 20250913 or later, or QuTS hero h5.2.7.3256 build 20250913 or later. For QuTS hero h5.3.x, the update is available in version h5.3.1.3250 build 20250912 and later.