CVE-2025-59383: QNAP Media Streaming Add-On

Critical severity, CVSS 9.1. EPSS: 0.3% chance of exploitation in the next 30 days.

A buffer overflow vulnerability has been reported to affect Media Streaming Add-On. The remote attackers can then exploit the vulnerability to modify memory or crash processes. We have already fixed the vulnerability in the following version: Media Streaming Add-on 500.1.1 and later

Affected products

• QNAP Media Streaming Add-On: before 500.1.1.0 (fixed in 500.1.1.0)

Published 2026-03-20. Last modified 2026-06-17.