← Database

CVE-2026-120008

HIGH CVSS: 8.2 Published: 2026-11-10 Modified: 2026-11-10

Description

SAP NetWeaver (Internet Graphics Service) does not sufficiently validate certain input values within incoming requests. An unauthenticated user could send a specially crafted request to trigger an out-of-bounds memory write in a worker process. Successful exploitation could result in memory corruption or repeated termination of the affected process, resulting in a high impact on availability and a low impact on integrity with no impact on confidentiality.

Affected Platforms

Unknown

Weakness Type

CWE-787

References