Unauthenticated code execution via unchecked buffer copy

Buffer overflow in QNAP Multimedia Console 1.4 and 2.1 allows remote attackers to execute code via unspecified network input. The application copies attacker-controlled input into a buffer without checking its length, but QNAP has not disclosed the affected function, protocol, or request field. No authentication or user interaction is required; successful exploitation executes code in the service context, while the high-complexity condition is undisclosed.