← Database

CVE-2026-109806

HIGH CVSS: 7.5 Published: 2026-11-10 Modified: 2026-11-10

Description

SAP NetWeaver (Internet Graphics Service) does not sufficiently validate certain input values within incoming requests. An unauthenticated user could send a specially crafted request containing malformed image data, triggering an integer overflow that leads to repeated termination of the worker process. This results in a high impact on availability with no impact on integrity or confidentiality.

Affected Platforms

Unknown

Weakness Type

CWE-125

References