QNAP QTS and QuTS hero Buffer Overflow Vulnerability Allowing Memory Modification or Process Crashes

A buffer overflow vulnerability has been identified in multiple versions of QNAP's operating systems, specifically QTS 5.2.x and QuTS hero h5.2.x and h5.3.x. This vulnerability allows remote attackers with user account access to exploit the issue, potentially leading to unauthorized memory modification or process crashes.

Impact

Exploitation of this vulnerability could result in memory corruption or process termination, causing a denial-of-service condition on the affected system.

Remediation

Users can update to QTS 5.2.7.3256 build 20250913 or QuTS hero h5.2.7.3256 build 20250913. For QuTS hero h5.3.x, update to QuTS hero h5.3.1.3250 build 20250912. Instructions for updating QTS or QuTS hero are available on the QNAP website.