← Back

CVE-2025-12686

nvd nist
Published: May 27, 2026Modified: Jun 17, 2026

JSON object

Loading...
9.8
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Exploitability: 3.9 / Impact: 5.9
Source: security@synology.com (Secondary)

Description

Buffer copy without checking size of input ('Classic Buffer Overflow') vulnerability in AdminCenter in Synology BeeStation OS before 1.3.2-65648 allows remote attackers to execute arbitrary code via unspecified vectors.

Affected (1)

Synology
1 product
Beestation Os
Configuration A
1 vulnerable
Vulnerable SoftwareAffected Versions
Beestation Os
From 1.0 to 1.3.2

Related CWEs

CWE-120
Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')
The product copies an input buffer to an output buffer without verifying that the size of the input buffer is less than the size of the output buffer, leading to a buffer overflow.

References (1)

Source: security@synology.com
Vendor Advisory

Timeline

No history available yet.