Heap-based Buffer Overflow Vulnerability in Dell PowerProtect Data Domain
CVE-2025-43912
5.3MEDIUM
Key Information:
- Vendor
Dell
- Status
- Powerprotect Data Domain With Data Domain Operating System (dd Os) Of Feature Release
- Powerprotect Data Domain With Data Domain Operating System (dd Os) Lts2025
- Powerprotect Data Domain With Data Domain Operating System (dd Os) Lts2024
- Powerprotect Data Domain With Data Domain Operating System (dd Os) Lts2023
- Vendor
- CVE Published:
- 7 October 2025
What is CVE-2025-43912?
Dell PowerProtect Data Domain systems, specifically those running certain versions of the Data Domain Operating System (DD OS), are susceptible to a heap-based buffer overflow vulnerability. An unauthenticated attacker with remote access can exploit this flaw, potentially leading to a denial of service, which can disrupt critical data protection services and compromise system integrity.
Affected Version(s)
PowerProtect Data Domain with Data Domain Operating System (DD OS) LTS2023 7.10.1.0 < 7.10.1.70
PowerProtect Data Domain with Data Domain Operating System (DD OS) LTS2024 7.13.1.0 < 7.13.1.40
PowerProtect Data Domain with Data Domain Operating System (DD OS) LTS2025 8.3.1.0 < 8.3.1.10