CVE-2025-59383Disclosure(qnap / media_streaming_add-on)

LOWCVSS 9.1 · CRITICAL

Signal is active with 1 mentions in latest observed window

Immediate actions

Track advisory updates for patch or workaround availability

Recommended action window: Monitor and triage in normal cycle

NVD description

A buffer overflow vulnerability has been reported to affect Media Streaming Add-On. The remote attackers can then exploit the vulnerability to modify memory or crash processes. We have already fixed the vulnerability in the following version: Media Streaming Add-on 500.1.1 and later

qnap CVEs Back to dashboard

0.0/ 10 priority

Sources & remediation

Vendor / third-party advisories

https://www.qnap.com/en/security-advisory/qsa-26-09

Weakness type (CWE)

CWE-121

Priority

LOW

Exploitation

NONE

PoC

NONE

Patch

NONE

Momentum

STABLE

Are you affected?

If you run products in this scope, you should treat this CVE as relevant to your environment.

media_streaming_add-on

Threat summary

4 mentions across 3 observed days
Momentum state: stable

What's happening

Technical details provided in 4 signals
Disclosure: 4 classified signals
Peaked 1d ago at 2 mentions (2026-03-22); latest day: 1
4 total mentions across 3 days

Affected systems

Vendors

qnap

Products

media_streaming_add-on

Deep dive

Activity timeline4 mentions / 3d

Signal classification1 categories

Disclosure

4100.0%

Referenced assets4 URLs

By indicator

Classification over time

Date	Total	Labels

2026-03-20	1	Disclosure1
2026-03-22	2	Disclosure2
2026-03-27	1	Disclosure1

Full discourse4 posts

neko_hat@neko__hat198d
Disclosure
@neko__hat New CVE Assigned: CVE-2025-59383 🛡️ I found a Stack-Based Buffer Overflow (BOF) vulnerability affecting QNAP NAS devices. Stay secure and make sure to check the official advisory: https://www.qnap.com/ko-kr/security-advisory/qsa-26-09 #QNAP #Cybersecurity #ExploitDev #SecurityAdvisory #NAS https://t.co/54JAMS1qXn
Post summary
The tweet announces CVE‑2025‑59383, a stack‑based buffer overflow vulnerability in QNAP NAS, and directs readers to an official advisory for further information.
00040182
32 followersView on X
Infoflowcloud@infoflowcloud203d
Disclosure
🚨*CVE* CVE-2025-59383 A buffer overflow vulnerability has been reported to affect Media Streaming Add-On. The remote attackers can then exploit the vulnerability to modify memory or crash … https://www.cve.org/CVERecord?id=CVE-2025-59383 ----- Traducción: CVE-2025-59383 Se … http://infoflow.cloud`
Post summary
The post discloses CVE-2025-59383 as a buffer overflow in the Media Streaming Add‑On that lets remote attackers alter memory or crash the system; no PoC, patch, or active exploitation is reported.
0000082
61 followersView on X
CVE@CVEnew203d
Disclosure
CVE-2025-59383 A buffer overflow vulnerability has been reported to affect Media Streaming Add-On. The remote attackers can then exploit the vulnerability to modify memory or crash … https://www.cve.org/CVERecord?id=CVE-2025-59383
Post summary
The post reports a buffer overflow in Media Streaming Add‑On that enables remote attackers to alter memory or crash, but provides no PoC, exploit tool, or patch information.
00000138
56.8K followersView on X
Vulmon Vulnerability Feed@VulmonFeeds204d
Disclosure
CVE-2025-59383 Buffer Overflow in Media Streaming Add-On Enables Remote Memory Modification https://vulmon.com/vulnerabilitydetails?qid=CVE-2025-59383
Post summary
The post announces a new buffer overflow vulnerability in a media streaming add-on that allows remote memory modification, but it does not provide a PoC, exploit, active exploitation evidence, or a patch.
0000081
4.0K followersView on X

CPE platform detail1 entries

Part:

Vendor:

Product:

Version:

Target SW:

Target HW:

1 of 1 entries

Part	Vendor	Product	Version	Target SW	Target HW
App	qnap	media_streaming_add-on	-	-	-

Explore more

Back to dashboard qnap CVEs media_streaming_add-on vulnerabilities

What researchers are saying

CVE-2025-59383

neko_hat@neko__hatDisclosure

The tweet announces CVE‑2025‑59383, a stack‑based buffer overflow vulnerability in QNAP NAS, and directs readers to an official advisory for further information.

Infoflowcloud@infoflowcloudDisclosure

The post discloses CVE-2025-59383 as a buffer overflow in the Media Streaming Add‑On that lets remote attackers alter memory or crash the system; no PoC, patch, or active exploitation is reported.

CVE@CVEnewDisclosure

The post reports a buffer overflow in Media Streaming Add‑On that enables remote attackers to alter memory or crash, but provides no PoC, exploit tool, or patch information.

Vulmon Vulnerability Feed@VulmonFeedsDisclosure

The post announces a new buffer overflow vulnerability in a media streaming add-on that allows remote memory modification, but it does not provide a PoC, exploit, active exploitation evidence, or a patch.