Description
A memory safety vulnerability exists in the Extended Passport Protocol (EPP) processing library. Under specific conditions, an unauthenticated attacker could exploit a crafted network request containing a malformed EPP header, potentially resulting in undefined behavior and abnormal program termination. Successful exploitation may have a high impact on the confidentiality, integrity, and availability of the application.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| SAP_SE | SAP Extended Passport (EPP) Processing | KRNL64NUC 7.22, 7.22EXT, KRNL64UC 7.22, 7.53, 8.04, WEBDISP 9.16, 9.18, 9.19, 9.20, KERNEL 7.22, 7.54, 7.77, 7.89, 7.93, 9.16 | — |
Advisories 2
- NCSC-2026-0356 Kwetsbaarheden verholpen in diverse SAP-producten NCSC-NL (Netherlands) · Sep 9, 2026
- WID-SEC-2026-3220 SAP Patch Day September 2026: Mehrere Schwachstellen BSI CERT-Bund (WID) · Sep 7, 2026