2792 matches found
CVE-2025-52872
CVE-2025-52872 is a buffer overflow vulnerability reported to affect QNAP OS versions, notably QTS and QuTS hero. The issue is described as a buffer copy/overflow that enables a remote attacker who has a user account to modify memory or crash processes. Affected products include QTS and QuTS hero...
CVE-2025-52864 QTS, QuTS hero
A buffer overflow vulnerability has been reported to affect several QNAP operating system versions. If a remote attacker gains a user account, they can then exploit the vulnerability to modify memory or crash processes. We have already fixed the vulnerability in the following versions: QTS...
CVE-2025-52864
CVE-2025-52864 describes a buffer overflow in QNAP OS families (QTS and QuTS hero) due to a buffer copy without checking size. The flaw allows a remote attacker who has a user account to modify memory or crash affected processes, potentially impacting system stability and availability. Affected v...
QNAP Systems QTS 安全漏洞
QNAP Systems QTS is a software with data storage and management capabilities from QNAP Systems Taiwan, China. A security vulnerability exists in QNAP Systems QTS that stems from the presence of a buffer overflow that could result in memory modification or process crash...
PT-2026-1100
Name of the Vulnerable Software and Affected Versions QNAP versions prior to 5.2.8.3332 build 20251128 Description A buffer overflow issue exists in QNAP operating system. A remote attacker gaining administrator access can exploit this to modify memory or cause processes to crash. Recommendations...
QNAP Systems QuTS hero和QNAP Systems QTS 安全漏洞
QNAP Systems QTS and QNAP Systems QuTS hero are both a software with data storage and management capabilities from QNAP Systems Taiwan, China. A security vulnerability exists in QNAP Systems QuTS hero and QNAP Systems QTS that originates from a buffer overflow that could result in modification of...
QNAP Systems QTS和QNAP Systems QuTS hero 安全漏洞
QNAP Systems QTS and QNAP Systems QuTS hero are both software with data storage and management capabilities from QNAP Systems, a Taiwan, China-based company. A security vulnerability exists in QNAP Systems QTS and QNAP Systems QuTS hero that originates from a buffer overflow that could result in...
QNAP Systems QTS和QNAP Systems QuTS hero 安全漏洞
QNAP Systems QTS and QNAP Systems QuTS hero are both software with data storage and management capabilities from QNAP Systems, a Taiwan, China-based company. A security vulnerability exists in QNAP Systems QTS and QNAP Systems QuTS hero that originates from a buffer overflow that could result in...
PT-2026-1077
Name of the Vulnerable Software and Affected Versions QNAP versions prior to QTS 5.2.7.3256 build 20250913 QNAP versions prior to QuTS hero h5.2.7.3256 build 20250913 QNAP versions prior to QuTS hero h5.3.0.3192 build 20250716 Description A buffer overflow issue exists in QNAP operating systems...
PT-2026-1075
Name of the Vulnerable Software and Affected Versions QNAP versions prior to QTS 5.2.7.3256 build 20250913 QNAP versions prior to QuTS hero h5.2.7.3256 build 20250913 QNAP versions prior to QuTS hero h5.3.0.3192 build 20250716 Description A buffer overflow issue exists in QNAP operating systems. ...
QNAP Systems QTS 安全漏洞
QNAP Systems QTS is a software with data storage and management capabilities from QNAP Systems Taiwan, China. A security vulnerability exists in QNAP Systems QTS that originates from a buffer overflow that could result in modifying memory or crashing a process...
PT-2026-1076
Name of the Vulnerable Software and Affected Versions QNAP versions prior to QTS 5.2.7.3256 build 20250913 QNAP versions prior to QuTS hero h5.2.7.3256 build 20250913 QNAP versions prior to QuTS hero h5.3.0.3192 build 20250716 Description A buffer overflow condition exists in QNAP operating...
PT-2026-1084
Name of the Vulnerable Software and Affected Versions QNAP versions prior to QTS 5.2.7.3256 build 20250913 QNAP versions prior to QuTS hero h5.2.7.3256 build 20250913 QNAP versions prior to QuTS hero h5.3.1.3250 build 20250912 Description A buffer overflow condition exists in QNAP operating...
CLSA-2025-1767094035 webkit2gtk3: Fix of 7 CVEs
Update to 2.50.4 to fix the following vulnerabilities: - CVE-2025-14174: fix memory corruption via improved validation of web content - CVE-2025-43501: fix buffer overflow with improved memory handling to prevent process crashes - CVE-2025-43529: fix use-after-free in memory management to prevent...
CVE-2025-14178
A flaw was found in PHP. A heap-based buffer overflow occurs in the arraymerge function when the total element count of packed arrays exceeds the 32-bit limit or the internal HTMAXSIZE due to an integer overflow in the precomputation of element counts using the zendhashnumelements function, causi...
Security update for webkit2gtk3
This update for webkit2gtk3 fixes the following issues: Update to version 2.50.4. Security issues fixed: CVE-2025-14174: processing maliciously crafted web content may lead to memory corruption due to improper validation bsc1255497. CVE-2025-43501: processing maliciously crafted web content may...
webkitgtk: Processing maliciously crafted web content may lead to an unexpected process crash
A flaw was found in WebKitGTK. Processing malicious web content can cause a race condition due to improper state handling and result in an unexpected process crash...
webkitgtk: Processing maliciously crafted web content may lead to an unexpected process crash
A flaw was found in WebKitGTK. Processing malicious web content can cause a buffer overflow due to improper memory handling and result in an unexpected process crash...
webkitgtk: Processing maliciously crafted web content may lead to an unexpected process crash
A flaw was found in WebKitGTK. Processing malicious web content can cause an unexpected process crash due to improper memory handling...
webkitgtk: Processing maliciously crafted web content may lead to an unexpected process crash
A flaw was found in WebKitGTK. Processing malicious web content can cause a buffer overflow due to improper memory handling and result in an unexpected process crash...