CVE-2023-52946: Synology Drive Client

High severity, CVSS 8.2. EPSS: 0.5% chance of exploitation in the next 30 days.

Buffer copy without checking size of input ('Classic Buffer Overflow') vulnerability in vss service component in Synology Drive Client before 3.5.0-16084 allows remote attackers to overwrite trivial buffers and crash the client via unspecified vectors.

Affected products

• Synology Drive Client: before 3.5.0-16084 (fixed in 3.5.0-16084)

Published 2024-09-26. Last modified 2026-06-17.