P4P3R

A missing critical step in authentication vulnerability in the Auth API in Synology DiskStation Manager (DSM) before 7.3.2-86009-5 and 7.4.1-90080-1 allows remote authenticated users to read or write arbitrary files and conduct denial-of-service attacks.

An OS command injection issue exists due to the improper neutralization of special elements used in an OS command. This allows an unauthenticated attacker to execute arbitrary operating system commands via the output redo/tuning functionality.

A heap-based buffer overflow occurs when the software processes environment variables. A heap-based buffer overflow is a memory corruption issue that happens when an application writes more data to a heap-allocated memory block than it can hold.

An out-of-bounds write occurs due to numeric truncation on Linux x86-64. An attacker capable of executing JavaScript can corrupt native memory and crash the host process by using a crafted class definition where the instance initialization entry count exceeds `UINT16 MAX` (the maximum value an unsigned 16-bit integer can hold).

Decoding a maliciously-crafted MIME header containing many invalid encoded-words can lead to excessive CPU consumption.