NULL Pointer Dereference in QNAP File Station 5

CVE-2025-29874

What is CVE-2025-29874?

A NULL pointer dereference vulnerability has been identified in File Station 5, potentially allowing remote attackers with user accounts to exploit the flaw. This exploitation can lead to a denial-of-service (DoS) condition, disrupting access and functionality of the application. It is recommended to update to File Station 5 version 5.5.6.4907 or later to mitigate this security issue.

References