CVE-2023-52946 — Synology / Synology Drive Client

CVE-2023-52946

Synology / Synology Drive Client PUBLISHED

Description (CNA)

Buffer copy without checking size of input ('Classic Buffer Overflow') vulnerability in vss service component in Synology Drive Client before 3.5.0-16084 allows remote attackers to overwrite trivial buffers and crash the client via unspecified vectors.

Affected (CNA)

Vendor / product	Versions
Synology / Synology Drive Client	affected * before 3.5.0-16084

CWE

CWE-120

References

https://www.synology.com/en-global/security/advisory/Synology_SA_24_10

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.