CVE-2025-52429 — Use of Externally-Controlled Format String in Systems INC QTS

CWE-134 — Use of Externally-Controlled Format String CWE-754 — Improper Check for Unusual or Exceptional Conditions4 documents4 sources

Severity

5.1MEDIUMNVD

EPSS

0.1%

top 83.79%

CISA KEV

Not in KEV

Exploit

No known exploits

Affected products

Qnap Systems INC QTS Qnap Systems INC Quts Hero Qnap QTS +1 more

Timeline

PublishedOct 3

Description

A use of externally-controlled format string vulnerability has been reported to affect several QNAP operating system versions. If a remote attacker gains an administrator account, they can then exploit the vulnerability to obtain secret data or modify memory. We have already fixed the vulnerability in the following versions: QTS 5.2.6.3195 build 20250715 and later QuTS hero h5.2.6.3195 build 20250715 and later

CVSS vector

CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N

Affected Packages4 packages

▶CVEListV5qnap_systems_inc/quts_heroh5.2.x — h5.2.6.3195 build 20250715

▶NVDqnap/quts_hero14 versions+13

▶CVEListV5qnap_systems_inc/qts5.2.x — 5.2.6.3195 build 20250715

▶NVDqnap/qts14 versions+13

🔴Vulnerability Details

CVEList

QTS, QuTS hero↗2025-10-03

▶

GHSA

GHSA-9f94-726p-5gmj: A use of externally-controlled format string vulnerability has been reported to affect several QNAP operating system versions↗2025-10-03

▶

📋Vendor Advisories

Microsoft

dm_table_create in drivers/md/dm-table.c in the Linux kernel through 6.7.4 can attempt to (in alloc_targets) allocate more than INT_MAX bytes and crash because of a missing check for struct dm_ioctl.t↗2024-02-13

▶