Synology Drive Client vulnerabilities

2 known vulnerabilities in Synology Drive Client from Synology. 2 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 8.2 High severity

  Synology Drive Client: Buffer Copy without Checking Size of Input

  CVE-2023-52946Sep 26, 2024Synology

  Buffer copy without checking size of input ('Classic Buffer Overflow') vulnerability in vss service component in Synology Drive Client before 3.5.0-16084 allows remote attackers to overwrite trivial buffers and crash the client via unspecified vectors.

• 7.8 High severity

  Synology Drive Client: Inclusion of Functionality from Untrusted Control Sphere

  CVE-2022-49038Sep 26, 2024Synology

  Inclusion of functionality from untrusted control sphere vulnerability in OpenSSL DLL component in Synology Drive Client before 3.3.0-15082 allows local users to execute arbitrary code via unspecified vectors.