CVE-2023-52946

—

CVSS 3.1

8.2 high

EPSS

<1%p44

Published

Sep 26, 2024 (Sep 26, 2024)

Modified

Jun 17, 2026

Description

Buffer copy without checking size of input ('Classic Buffer Overflow') vulnerability in vss service component in Synology Drive Client before 3.5.0-16084 allows remote attackers to overwrite trivial buffers and crash the client via unspecified vectors.

Vendors: synology
Products: drive client
Weakness: CWE-120
Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:H

NVD CVE.org GitHub PoCs EPSS (0.5%)

In the news0 stories

No ingested article mentions this CVE yet.