Heap-based Buffer Overflow in Arcserve Unified Data Protection

CVE-2025-34522

What is CVE-2025-34522?

A vulnerability exists in the input parsing logic of Arcserve Unified Data Protection that can be exploited through heap-based buffer overflow. This flaw allows unauthorized attackers to send specially crafted inputs which compromise heap memory, resulting in application instability or enabling remote code execution. The exploitation does not require user interaction and can occur pre-authentication. All versions prior to 10.2 are affected, while versions 8.0 through 10.1 need urgent patching or upgrading. Version 10.2 incorporates necessary security fixes.

References