Out-of-Bounds Write Vulnerability in QNAP Operating Systems
CVE-2024-38638
What is CVE-2024-38638?
An out-of-bounds write vulnerability has been identified in several QNAP operating system versions, allowing potential exploitation by remote attackers with administrator access. This flaw could enable them to modify or corrupt memory, raising significant security concerns for affected users. Users are encouraged to upgrade to QTS 5.1.9.2954 build 20241120 or later, and QuTS hero h5.1.9.2954 build 20241120 or later to mitigate this risk. Immediate attention to these updates is crucial for maintaining system integrity.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.
Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.
Affected Version(s)
QTS 5.1.x < 5.1.9.2954 build 20241120
QuTS hero h5.1.x
QTS 5.2.x
References
CVSS V4
Timeline
Vulnerability published
Vulnerability Reserved