Heap-Based Buffer Overflow Vulnerability in Arcserve Unified Data Protection

CVE-2025-34523

What is CVE-2025-34523?

A heap-based buffer overflow vulnerability exists in Arcserve Unified Data Protection's network-facing input handling routines, allowing remote attackers to exploit improperly checked input. By sending crafted data, attackers can corrupt heap memory, leading to potential denial of service or arbitrary code execution. This vulnerability, affecting all UDP versions prior to 10.2, can be exploited without authentication and requires no user interaction. To mitigate the risk, users of versions 8.0 through 10.1 should apply patches or upgrade to version 10.2, while versions 7.x and earlier should also be upgraded to ensure security.

References