CVE-2024-56805

MediumCVSS 5.4/10Last modified Jun 17, 2026

Description

A buffer overflow vulnerability has been reported to affect several QNAP operating system versions. If exploited, the vulnerability could allow remote attackers who have gained user access to modify memory or crash processes.

We have already fixed the vulnerability in the following versions: QTS 5.2.4.3079 build 20250321 and later QuTS hero h5.2.4.3079 build 20250321 and later

Metrics

CVSS 3.1 5.4/10CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:L

Weakness enumeration

CWE-120CWE-122

Affected software

VendorProductVersions
QNAP Systems Inc.QTS>= 5.2.x, < 5.2.4.3079 build 20250321
QNAP Systems Inc.QuTS hero>= h5.2.x, < h5.2.4.3079 build 20250321

References

Timeline

Published
Jun 6, 2025
Last modified
Jun 17, 2026
NVD status
Analyzed

Related CVEs from 2024

CVE-2024-568075.5An out-of-bounds read vulnerability has been reported to affect Media Streaming add-on. If an attacker gains local network access, they can CVE-2024-568087.8A command injection vulnerability has been reported to affect Media Streaming add-on. If an attacker gains local network access who have alsCVE-2024-56817.8CWE-20: Improper Input Validation vulnerability exists that could cause local denial-of-service, privilege escalation, and potentially kerneCVE-2024-568103.3IBM EntireX 11.1 could allow a local user to obtain sensitive information when a detailed technical error message is returned. This informaCVE-2024-568113.3IBM EntireX 11.1 could allow a local user to obtain sensitive information when a detailed technical error message is returned. This informaCVE-2024-568125.5IBM EntireX 11.1 could allow a local user to obtain sensitive information when a detailed technical error message is returned. This informaCVE-2024-56826.5Improper Restriction of Excessive Authentication Attempts vulnerability in Yordam Information Technology Yordam Library Automation System alCVE-2024-568265.6A flaw was found in the OpenJPEG project. A heap buffer overflow condition may be triggered when certain options are specified while using tCVE-2024-568275.6A flaw was found in the OpenJPEG project. A heap buffer overflow condition may be triggered when certain options are specified while using tCVE-2024-568289.8File Upload vulnerability in ChestnutCMS through 1.5.0. Based on the code analysis, it was determined that the /api/member/avatar API endpoiCVE-2024-5682910.0Huang Yaoshi Pharmaceutical Management Software through 16.0 allows arbitrary file upload via a .asp filename in the fileName element of theCVE-2024-56839.8Improper Control of Generation of Code ('Code Injection') vulnerability in Next4Biz CRM & BPM Software Business Process Manangement (BPM) al