PT-2025-10100
CVE-2024-38638
·
Published
2025-03-07
·
Updated
2025-09-23
Description by
CVSS 3.1
7.2
HighMetricsAV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions
QNAP QTS versions prior to 5.1.9.2954 build 20241120
QNAP QuTS hero h5.1.9 versions prior to 5.1.9.2954 build 20241120
Description
An out-of-bounds write issue has been reported, potentially allowing remote attackers with administrator access to modify or corrupt memory.
Recommendations
For QNAP QTS versions prior to 5.1.9.2954 build 20241120, update to QTS 5.1.9.2954 build 20241120 or later.
For QNAP QuTS hero h5.1.9 versions prior to 5.1.9.2954 build 20241120, update to QuTS hero h5.1.9.2954 build 20241120 or later.
Found an issue in the description? Have something to add? Feel free to write us 👾