CVE-2025-52863CWE-120

CVE-2025-52863

High · published January 2, 2026

CVSS v3.1
8.1
EPSS
0%
Percentile
28.0
In the wild
Unconfirmed
What it is

⚠️ A remote attacker with a user account can trigger a buffer overflow in QNAP OS, making it a surprisingly sneaky risk to manage! Think of it like a coffee cup overflowing after a user fills it too full — things can get messy and unmanageable if not addressed quickly! If exploited, this vulnerability could allow an attacker to modify critical areas of memory or even crash processes, leading to potential disruptions in service. While the severity is low, it’s still a risk that could cause frustration or downtime.

Put simply

Think of it like a coffee cup overflowing after a user fills it too full — things can get messy and unmanageable if not addressed quickly! This buffer overflow vulnerability allows authenticated attackers to manipulate memory via crafted input, which can result in crashing processes or unintended changes to system behavior.

What to do

If exploited, this vulnerability could allow an attacker to modify critical areas of memory or even crash processes, leading to potential disruptions in service. While the severity is low, it’s still a risk that could cause frustration or downtime. To protect your system, ensure you update to QTS 5.2.7.3256 build 20250913 or later, or QuTS hero h5.2.7.3256 or h5.3.0.3192 build 20250716 and later. Regularly check for updates to avoid similar vulnerabilities in the future. You've got this! Keeping your system updated will keep it secure. 🛡️

The record
Technical detail
CVSS v3.1
8.1 · HIGH
Vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.00355 · 28.0th percentile
Weakness
CWE-120 · Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')
Published
2026-01-02T20:16Z
Affected products (34)
ProductVersionsFixed in
qnap/quts_heroall versions—
qnap/quts_heroall versions—
qnap/quts_heroall versions—
qnap/quts_heroall versions—
qnap/quts_heroall versions—
qnap/quts_heroall versions—
qnap/quts_heroall versions—
qnap/quts_heroall versions—
qnap/quts_heroall versions—
qnap/quts_heroall versions—
qnap/quts_heroall versions—
qnap/quts_heroall versions—
qnap/quts_heroall versions—
qnap/quts_heroall versions—
qnap/quts_heroall versions—
qnap/quts_heroall versions—
qnap/quts_heroall versions—
qnap/quts_heroall versions—
qnap/qtsall versions—
qnap/qtsall versions—
qnap/qtsall versions—
qnap/qtsall versions—
qnap/qtsall versions—
qnap/qtsall versions—
qnap/qtsall versions—
qnap/qtsall versions—
qnap/qtsall versions—
qnap/qtsall versions—
qnap/qtsall versions—
qnap/qtsall versions—
qnap/qtsall versions—
qnap/qtsall versions—
qnap/qtsall versions—
qnap/qtsall versions—
References (1)
EPSS history
Timeline
  • 02 JAN 14:53Z
    QTS, QuTS hero
    cvelistv5