NULL Pointer Dereference Vulnerability in QNAP File Station

CVE-2025-29875

What is CVE-2025-29875?

A NULL pointer dereference vulnerability has been identified in QNAP's File Station 5, potentially allowing a remote attacker with user account access to exploit the issue. By doing so, they could trigger a denial-of-service (DoS) condition, affecting the availability of the service. Users are urged to update to File Station 5 version 5.5.6.4907 or later to mitigate this risk.

References