Heap-based Buffer Overflow in Dell PowerProtect Data Domain
CVE-2025-46643
Key Information:
- Vendor
Dell
- Status
- Powerprotect Data Domain With Data Domain Operating System (dd Os) Feature Release
- Powerprotect Data Domain With Data Domain Operating System (dd Os) Lts2025
- Powerprotect Data Domain With Data Domain Operating System (dd Os) Lts2024
- Powerprotect Data Domain With Data Domain Operating System (dd Os) Lts2023
- Vendor
- CVE Published:
- 9 January 2026
What is CVE-2025-46643?
The Dell PowerProtect Data Domain systems, specifically those running various affected versions of the Data Domain Operating System, are subject to a heap-based buffer overflow vulnerability. This flaw allows an attacker with high privileges and local access to the system to exploit the vulnerability, potentially resulting in a Denial of Service condition. It is crucial for users of these systems to be aware of this issue and apply necessary updates to safeguard against potential exploitation.
Affected Version(s)
PowerProtect Data Domain with Data Domain Operating System (DD OS) Feature Release 7.7.1.0 < 8.5.0.0
PowerProtect Data Domain with Data Domain Operating System (DD OS) LTS2023 7.10.1.0 < 7.10.1.80
PowerProtect Data Domain with Data Domain Operating System (DD OS) LTS2024 7.13.1.0 < 7.13.1.50
References
CVSS V3.1
Timeline
Vulnerability published
Vulnerability Reserved