CVE-2022-49040 — Synology / Synology Drive Client

CVE-2022-49040

Synology / Synology Drive Client PUBLISHED

Description (CNA)

Buffer copy without checking size of input ('Classic Buffer Overflow') vulnerability in connection management functionality in Synology Drive Client before 3.4.0-15721 allows local users with administrator privileges to crash the client via unspecified vectors.

Affected (CNA)

Vendor / product	Versions
Synology / Synology Drive Client	affected * before 3.5.0-16084

CWE

CWE-120

References

https://www.synology.com/en-global/security/advisory/Synology_SA_24_10

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.