Skip to content
OpenAdvisories
High · 8.2 CVE-2026-120008 EUVD-2026-120694GHSA-m4q3-78j7-767p

Memory Corruption Vulnerability in SAP NetWeaver (Internet Graphics Service)

Published Nov 10, 2026 · Updated Nov 10, 2026 · Assigned by sap

Description

SAP NetWeaver (Internet Graphics Service) does not sufficiently validate certain input values within incoming requests. An unauthenticated user could send a specially crafted request to trigger an out-of-bounds memory write in a worker process. Successful exploitation could result in memory corruption or repeated termination of the affected process, resulting in a high impact on availability and a low impact on integrity with no impact on confidentiality.

Affected products

VendorProductAffectedFixed
SAP_SE SAP NetWeaver (Internet Graphics Service) BC-FES-IGS 7.20EXT, 7.20_EX2, 7.53, 7.54, 7.81, 9.16 —

Advisories 2

References