CVE-2025-48725CWE-120CWE-121

QuTS hero

Low · published February 11, 2026

CVSS v4.0
0.6
EPSS
0%
Percentile
39.1
In the wild
Unconfirmed
What it is

A buffer overflow vulnerability has been reported to affect several QNAP operating system versions. If a remote attacker gains a user account, they can then exploit the vulnerability to modify memory or crash processes.

We have already fixed the vulnerability in the following version:

QuTS hero h5.3.2.3354 build 20251225 and later

The record
Technical detail
CVSS v4.0
0.6 · LOW
Vector
CVSS:4.0/AV:N/AC:L/AT:P/PR:L/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:U
EPSS
0.00462 · 39.1th percentile
Weaknesses
CWE-120 · Buffer Copy without Checking Size of Input ('Classic Buffer Overflow'); CWE-121 · Stack-based Buffer Overflow
Published
2026-02-11T12:19Z
EPSS history
Timeline
  • 11 FEB 12:19Z
    QuTS hero
    cvelistv5