A stack-based buffer overflow exists in Dell PowerProtect Data Domain that can be triggered by a high privileged attacker with remote access. Exploitation can cause the appliance to crash, resulting in a denial of service. The vulnerability is classified as CWE-121, indicating that an attacker can overflow a buffer on the stack, leading to loss of system availability but not necessarily compromising confidentiality or integrity.

Dell PowerProtect Data Domain Feature Release versions 7.7.1.0 through 8.7, LTS2024 release versions 7.13.1.0 through 7.13.1.80, LTS2025 release versions 8.3.1.0 through 8.3.1.40, and LTS2026 release versions 8.6.1.0 through 8.6.1.20 are affected. These releases span multiple major version lines but share the same vulnerable code paths.

The CVSS score of 4.9 indicates moderate severity. The EPSS score is not available, so the current exploitation probability cannot be quantified. The vulnerability is not listed in CISA KEV, implying limited known exploitation. Attackors would need remote high privileged access; therefore, the risk is confined to environments where such access is possible. Once exploited, the impact is limited to service disruption, with no direct evidence of confidentiality or integrity compromise.