Qnap QTS and QuTS hero NULL Pointer Dereference (CVE-2025-29882)

A NULL pointer dereference vulnerability has been reported to affect several QNAP operating system versions. If a remote attacker gains a user account, they can then exploit the vulnerability to launch a denial-of-service DoS attack. We have already fixed the vulnerability in the following...

CVE-2025-29882

CVE-2025-29882 describes a NULL pointer dereference affecting QNAP QTS and QuTS hero. The issue allows a remote attacker with a user account to cause a denial-of-service (DoS). Affected products and fixes are: QTS: 5.2.5.3145 build 20250526 and later QuTS hero: h5.2.5.3138 build 20250519 and late...