Skip to content
OpenAdvisories
Medium · 4.4 CVE-2022-49040 EUVD-2022-53882GHSA-8w37-7r3v-2w47

Buffer copy without checking size of input ('Classic Buffer Overflow') vulnerability in connection management functionality in Synology Dri…

Published Sep 26, 2024 · Updated Sep 26, 2024 · Assigned by synology

Vendor: Synology Product: Synology Drive Client

Description

Buffer copy without checking size of input ('Classic Buffer Overflow') vulnerability in connection management functionality in Synology Drive Client before 3.4.0-15721 allows local users with administrator privileges to crash the client via unspecified vectors.

Affected products

VendorProductAffectedFixed
Synology Synology Drive Client < 3.5.0-16084 3.5.0-16084

References