CVE-2025-30273

HighCVSS 8.1/10Last modified Sep 26, 2026

Description

An out-of-bounds write vulnerability has been reported to affect several QNAP operating system versions. If a remote attacker gains a user account, they can then exploit the vulnerability to modify or corrupt memory.

We have already fixed the vulnerability in the following versions: QTS 5.2.5.3145 build 20250526 and later QuTS hero h5.2.5.3138 build 20250519 and later

Metrics

CVSS 3.1 8.1/10CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H

Weakness enumeration

CWE-787

Affected software

VendorProductVersions
QNAP Systems Inc.QTS>= 5.2.x, < 5.2.5.3145 build 20250526
QNAP Systems Inc.QuTS hero>= h5.2.x, < h5.2.5.3138 build 20250519

References

Timeline

Published
Aug 29, 2025
Last modified
Sep 26, 2026
NVD status
Analyzed

Related CVEs from 2025

CVE-2025-302746.5A NULL pointer dereference vulnerability has been reported to affect several QNAP operating system versions. If can then exploit the vulnerCVE-2025-302756.5A NULL pointer dereference vulnerability has been reported to affect Qsync Central. If a remote attacker gains a user account, they can thenCVE-2025-302768.8An out-of-bounds write vulnerability has been reported to affect Qsync Central. If a remote attacker gains a user account, they can then expCVE-2025-302778.8An improper certificate validation vulnerability has been reported to affect Qsync Central. If a remote attacker gains a user account, they CVE-2025-302788.8An improper certificate validation vulnerability has been reported to affect Qsync Central. If a remote attacker gains a user account, they CVE-2025-302798.8An improper certificate validation vulnerability has been reported to affect File Station 5. If a remote attacker gains a user account, theCVE-2025-30286.5JavaScript code running while transforming a document with the XSLTProcessor could lead to a use-after-free. This vulnerability was fixed inCVE-2025-302805.3A vulnerability has been identified in Mendix Runtime V10 (All versions < V10.21.0), Mendix Runtime V10.12 (All versions < V10.12.16), MendiCVE-2025-302819.1ColdFusion versions 2023.12, 2021.18, 2025.0 and earlier are affected by an Improper Access Control vulnerability that could result in arbitCVE-2025-302829.1ColdFusion versions 2023.12, 2021.18, 2025.0 and earlier are affected by an Improper Authentication vulnerability that could result in arbitCVE-2025-302848.4ColdFusion versions 2023.12, 2021.18, 2025.0 and earlier are affected by a Deserialization of Untrusted Data vulnerability that could resultCVE-2025-302858.4ColdFusion versions 2023.12, 2021.18, 2025.0 and earlier are affected by a Deserialization of Untrusted Data vulnerability that could result