Critical · 9.8 CVE-2024-11131 EUVD-2024-54109GHSA-75ww-mcr4-2298

A vulnerability regarding out-of-bounds read is found in the video interface. This allows remote attackers to execute arbitrary code via un…

Published Mar 19, 2025 · Updated Mar 19, 2025 · Assigned by synology

Vendor: Synology Product: Camera Firmware

Description

A vulnerability regarding out-of-bounds read is found in the video interface. This allows remote attackers to execute arbitrary code via unspecified vectors. The following models with Synology Camera Firmware versions before 1.2.0-0525 may be affected: BC500, CC400W and TC500.

Affected products

Vendor	Product	Affected	Fixed
Synology	Camera Firmware	1.1 – < 1.2.0-0525	1.2.0-0525

References

Synology-SA-24:24 Synology Camera (PWN2OWN 2024) vendor-advisory