A buffer overflow in the Media Streaming Add‑on allows an attacker to corrupt memory, which can lead to application crashes or potentially allow the attacker to modify program execution. The vulnerability is defined as CWE‑121, indicating an unsafe write beyond array bounds that can alter program state.

QNAP Systems Inc.’s Media Streaming Add‑on is affected. All releases before version 500.1.1 contain the flaw; the issue is resolved in 500.1.1 and later."

The CVSS score of 2.7 classifies this as low severity. No EPSS data is available, and the vulnerability is not listed in KEV. The attack vector is inferred to be remote, as the description states that remote attackers can exploit the flaw to disturb memory or crash processes. Exploitation would likely require legitimate network access to the add‑on, and success would result in denial‑of‑service or potential memory corruption but not immediate remote code execution.