CVE-2025-50464

A stack-based buffer overflow vulnerability exists in the upload.cgi module of iptime NAS firmware v1.5.04 . The flaw is caused by the unsafe use of the strcpy function, which copies attacker-controlled data from the CONTENT_TYPE HTTP header into a fixed-size stack buffer (8 bytes) without adequa...