What is GHSA-3gcv-ff7j-4x62?

GHSA-3gcv-ff7j-4x62 is a security advisory published by GitHub Security Advisories with Medium severity. A NULL pointer dereference vulnerability has been reported to affect several QNAP operating...

Which CVE IDs does GHSA-3gcv-ff7j-4x62 cover?

GHSA-3gcv-ff7j-4x62 covers the following CVE IDs: CVE-2025-30272. Each CVE has its own detail page on EchelonGraph Pulse with the synthesized EG score.

What is the CVSS v3 score of GHSA-3gcv-ff7j-4x62?

GHSA-3gcv-ff7j-4x62 has a CVSS v3 base score of 6.5, published by GitHub Security Advisories.

GHSA-3gcv-ff7j-4x62MediumCVSS 6.5

A NULL pointer dereference vulnerability has been reported to affect several QNAP operating...

Vendor

GitHub Security Advisories

Published

August 29, 2025

Last Modified

September 26, 2026

🔗 CVE IDs covered (1)

CVE-2025-30272 →

📋 Description

A NULL pointer dereference vulnerability has been reported to affect several QNAP operating system versions. If can then exploit the vulnerability to launch a denial-of-service (DoS) attack.

We have already fixed the vulnerability in the following versions: QTS 5.2.5.3145 build 20250526 and later QuTS hero h5.2.5.3138 build 20250519 and later

🔗 References (3)

https://nvd.nist.gov/vuln/detail/CVE-2025-30272
https://www.qnap.com/en/security-advisory/qsa-25-21
https://github.com/advisories/GHSA-3gcv-ff7j-4x62