Skip to content
OpenAdvisories
High · 8.2 CVE-2023-52946 EUVD-2023-59630GHSA-pfx6-gm2c-cw74

Buffer copy without checking size of input ('Classic Buffer Overflow') vulnerability in vss service component in Synology Drive Client befo…

Published Sep 26, 2024 · Updated Sep 26, 2024 · Assigned by synology

Vendor: Synology Product: Synology Drive Client

Description

Buffer copy without checking size of input ('Classic Buffer Overflow') vulnerability in vss service component in Synology Drive Client before 3.5.0-16084 allows remote attackers to overwrite trivial buffers and crash the client via unspecified vectors.

Affected products

VendorProductAffectedFixed
Synology Synology Drive Client < 3.5.0-16084 3.5.0-16084

References