Skip to content
OpenAdvisories
Critical · 9.8 CVE-2025-12686 EUVD-2025-209957GHSA-9f49-q57w-cw53

Buffer copy without checking size of input ('Classic Buffer Overflow') vulnerability in AdminCenter in Synology BeeStation OS before 1.3.2-…

Published May 27, 2026 · Updated May 27, 2026 · Assigned by synology

Vendor: Synology Product: BeeStation OS

Description

Buffer copy without checking size of input ('Classic Buffer Overflow') vulnerability in AdminCenter in Synology BeeStation OS before 1.3.2-65648 allows remote attackers to execute arbitrary code via unspecified vectors.

Affected products

VendorProductAffectedFixed
Synology BeeStation OS 1.3 – < 1.3.2-65648, 1.2 – < 1.3.2-65648, 1.1 – < 1.3.2-65648, 1.0 – < 1.3.2-65648 1.3.2-65648

References