CVE-2024-11131CWE-125

A vulnerability regarding out-of-bounds read is found in the video interface

Critical · published March 19, 2025

CVSS v3.1
9.8
EPSS
1%
Percentile
55.2
In the wild
Unconfirmed
What it is

🚨 An out-of-bounds read bug in Synology Camera Firmware could let attackers execute code remotely, essentially turning your security cameras into tools for chaos! 🔥 Think of it like a window that opens unexpectedly in a secure building — it allows anyone outside to peek in and potentially manipulate what's happening inside. This vulnerability could give attackers a foothold into your camera's operations without needing permission. If exploited, an attacker could run arbitrary code on your devices, letting them control your cameras and access sensitive information. This could feel absolutely devastating as your once-safe surveillance setup becomes a target, jeopardizing your security and privacy.

Put simply

Think of it like a window that opens unexpectedly in a secure building — it allows anyone outside to peek in and potentially manipulate what's happening inside. This vulnerability could give attackers a foothold into your camera's operations without needing permission. The vulnerability stems from an out-of-bounds read issue in the video interface, allowing remote attackers to execute arbitrary code through unspecified vectors in affected camera models running firmware versions prior to 1.2.0-0525.

What to do

If exploited, an attacker could run arbitrary code on your devices, letting them control your cameras and access sensitive information. This could feel absolutely devastating as your once-safe surveillance setup becomes a target, jeopardizing your security and privacy. Immediately update your Synology Camera Firmware to version 1.2.0-0525 or later. Review your network security settings and ensure that unauthorized access is limited. Consider changing any related credentials as a precaution. You've got this! By following these steps, you can reinforce your security and keep those cameras safe! 🛡️

The record
Technical detail
CVSS v3.1
9.8 · CRITICAL
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.00772 · 55.2th percentile
Weakness
CWE-125 · Out-of-bounds Read
Published
2025-03-19T02:15Z
EPSS history
Timeline
  • 19 MAR 02:15Z
    A vulnerability regarding out-of-bounds read is found in the video interface
    cvelistv5