Buffer Overflow in QTS 5.2.8.3332 (QNAP) Exposes Admin Remote Exploit
CVE-2025-62852 Published on January 2, 2026
QTS, QuTS hero
A buffer overflow vulnerability has been reported to affect several QNAP operating system versions. If a remote attacker gains an administrator account, they can then exploit the vulnerability to modify memory or crash processes.
We have already fixed the vulnerability in the following version:
QTS 5.2.8.3332 build 20251128 and later
Weakness Type
What is a Stack Overflow Vulnerability?
A stack-based buffer overflow condition is a condition where the buffer being overwritten is allocated on the stack (i.e., is a local variable or, rarely, a parameter to a function).
CVE-2025-62852 has been classified to as a Stack Overflow vulnerability or weakness.
Products Associated with CVE-2025-62852
Want to know whenever a new CVE is published for QNAP Qts? stack.watch will email you.
Affected Versions
QNAP Systems Inc. QTS:- Version 5.2.x and below 5.2.8.3332 build 20251128 is affected.
Exploit Probability
EPSS (Exploit Prediction Scoring System) scores estimate the probability that a vulnerability will be exploited in the wild within the next 30 days. The percentile shows you how this score compares to all other vulnerabilities.