Out-of-Bounds Write Vulnerability in Qsync Central by QNAP

CVE-2025-44014

What is CVE-2025-44014?

An out-of-bounds write vulnerability has been identified in Qsync Central, impacting the integrity of memory. If an unauthorized remote attacker successfully obtains a user account, they may exploit this vulnerability to manipulate or corrupt memory allocations within the affected application. It is crucial for users to upgrade to version 5.0.0.1 or later, released on July 9, 2025, to mitigate the risk associated with this vulnerability. For further information, refer to the security advisory.

References