#VU105481 Double free in QNAP QTS and QuTS hero - CVE-2024-53698

CSH
CYBERSECURITY HELP
Sign In REGISTER
 
Main Vulnerability Database Vulnerabilities #VU105481

#VU105481 Double free in QNAP QTS and QuTS hero - CVE-2024-53698

Published: March 10, 2025


Vulnerability identifier: #VU105481
Vulnerability risk: Low
CVSSv4.0: CVSS:4.0/AV:N/AC:H/AT:N/PR:H/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:U/U:Clear
CVE-ID: CVE-2024-53698
CWE-ID: CWE-415
Exploitation vector: Remote access
Exploit availability: No public exploit available
Vulnerable software:
QNAP QTS
QuTS hero
Software vendor:
QNAP Systems, Inc.

Description

The vulnerability allows a remote user to execute arbitrary code on the target system.

The vulnerability exists due to a boundary error. A remote administrator can pass specially crafted data to the application, trigger double free error, modify memory and execute arbitrary code on the target system.


Remediation

Install updates from vendor's website.

External links