CVE-2025-59383
Published: 20 March 2026
Summary
CVE-2025-59383 is a low-severity Stack-based Buffer Overflow (CWE-121) vulnerability in Qnap Media Streaming Add-On. Its CVSS base score is 2.7 (Low).
Operationally, exploitation aligns with the MITRE ATT&CK technique Exploit Public-Facing Application (T1190); ranked at the 23.4th percentile by exploit likelihood (below the median); it is not currently listed in the CISA KEV catalog.
The strongest mitigations our analysis identified are NIST 800-53 SI-10 (Information Input Validation) and SI-16 (Memory Protection).
Deeper analysis
CVE-2025-59383 is a buffer overflow vulnerability (CWE-121) affecting the Media Streaming Add-On software component. Published on 2026-03-20, it carries a CVSS v3.1 base score of 9.1 (AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:H), indicating network accessibility, low attack complexity, no required privileges or user interaction, and unchanged scope with high impacts to integrity and availability but no confidentiality impact.
Remote, unauthenticated attackers can exploit this vulnerability over the network to modify memory or crash processes, potentially leading to denial-of-service conditions or unauthorized data manipulation within the affected component.
QNAP's security advisory (QSA-26-09) states that the vulnerability has been fixed in Media Streaming Add-on version 500.1.1 and later; users should update to a patched version for mitigation. Full details are available at https://www.qnap.com/en/security-advisory/qsa-26-09.
EU & UK References
- 🇪🇺 ENISA EUVD: EUVD-2025-208893
Vulnerability details
A buffer overflow vulnerability has been reported to affect Media Streaming Add-On. The remote attackers can then exploit the vulnerability to modify memory or crash processes. We have already fixed the vulnerability in the following version: Media Streaming Add-on 500.1.1…
more
and later
- CWE(s)
Related Threats
MITRE ATT&CK Enterprise TechniquesAI
Why these techniques?
Buffer overflow in network-accessible Media Streaming Add-On enables unauthenticated remote exploitation of a public-facing application (T1190) for process crashes (DoS via application exploitation, T1499.004) and memory modification (data manipulation).
CVEs Like This One
Affected Assets
Mitigating Controls
Mitigating Controls (NIST 800-53 r5) AI
Requires timely identification, reporting, and patching of software flaws like this buffer overflow vulnerability, directly mitigating exploitation by updating to the fixed Media Streaming Add-on version 500.1.1.
Implements memory protection mechanisms such as ASLR and DEP to prevent unauthorized code execution and memory modification from buffer overflow exploits.
Enforces validation of network inputs to detect and reject oversized or malformed data that could trigger the buffer overflow in the Media Streaming Add-on.