Out-of-Bounds Write Vulnerability in QNAP Operating Systems

CVE-2024-53697

What is CVE-2024-53697?

An out-of-bounds write vulnerability has been identified in several versions of the QNAP operating system. This issue enables remote attackers, with administrative privileges, to modify or corrupt memory, potentially compromising system integrity. Affected users are urged to upgrade to QTS 5.2.3.3006 build 20250108 or later, as well as QuTS hero h5.2.3.3006 build 20250108 or later, to mitigate this risk. For further details, refer to the security advisory.

References