CVE-2021-39048: IBM Spectrum Protect Backup-Archive Client

Medium severity, CVSS 5.5. EPSS: 0.3% chance of exploitation in the next 30 days.

IBM Spectrum Protect Client 7.1 and 8.1 is vulnerable to a stack based buffer overflow, caused by improper bounds checking. A local attacker could exploit this vulnerability and cause a denial of service. IBM X-Force ID: 214438.

Affected products

• IBM Spectrum Protect Backup-Archive Client: from 8.1.0.0, up to and including 8.1.12.0; from 7.1.0.0, up to and including 7.1.8.10
• IBM Spectrum Protect For Space Management: from 8.1.0.0, up to and including 8.1.12.0; from 7.1.0.0, up to and including 7.1.8.10

Published 2021-12-13. Last modified 2026-06-17.