CVE-2025-62848
Severity CVSS v4.0:
HIGH
Type:
CWE-476
NULL Pointer Dereference
Publication date:
16/12/2025
Last modified:
16/12/2025
Description
A NULL pointer dereference vulnerability has been reported to affect several QNAP operating system versions. The remote attackers can then exploit the vulnerability to launch a denial-of-service (DoS) attack.<br />
<br />
We have already fixed the vulnerability in the following versions:<br />
QTS 5.2.7.3297 build 20251024 and later<br />
QuTS hero h5.2.7.3297 build 20251024 and later<br />
QuTS hero h5.3.1.3292 build 20251024 and later