CVE-2025-29897:詳細資料

CVE-2025-29897

2026-10-15
07h17 +00:00
Overflow
2026-10-19
22h10 +00:00
指定 CVE 通知
掌握特定 CVE 的任何變更。
管理通知

CVE 描述

A buffer copy without checking size of input vulnerability has been reported to affect Qsync Central. If a remote attacker gains a user account, they can then exploit the vulnerability to modify memory or crash processes. We have already fixed the vulnerability in the following version: Qsync Central 5.0.0.4 and later

CVE 資訊

相關弱點

CWE-ID 弱點名稱 來源
CWE-120 Buffer Copy without Checking Size of Input
The product copies an input buffer to an output buffer without verifying that the size of the input buffer is less than the size of the output buffer.
CWE-121 Stack-based Buffer Overflow
The product writes past the end of a buffer that was allocated on the stack.

參考資料