NULL Pointer Dereference Vulnerability in QNAP Operating Systems

CVE-2025-52433

What is CVE-2025-52433?

A NULL pointer dereference vulnerability has been identified in several versions of QNAP's operating system. This flaw can allow a remote attacker with administrator access to exploit the vulnerability effectively, potentially leading to a denial-of-service (DoS) attack. Users are strongly advised to upgrade to the fixed versions: QTS 5.2.6.3195 build 20250715 and later, or QuTS hero h5.2.6.3195 build 20250715 and later to mitigate this risk.

References