Out-of-Bounds Write Vulnerability Affects QNAP NAS Operating Systems

CVE-2025-30273

What is CVE-2025-30273?

An out-of-bounds write vulnerability has been identified in QNAP NAS operating systems, potentially allowing remote attackers with user accounts to exploit the flaw. By leveraging this weakness, malicious actors can modify or corrupt system memory, leading to severe consequences for device integrity and user data security. QNAP has addressed this vulnerability in specific updates: QTS 5.2.5.3145 build 20250526 and later, as well as QuTS hero h5.2.5.3138 build 20250519 and subsequent versions.

References