SAP SAPCAR 721.510 has a Heap Based Buffer Overflow Vulnerability. It could be exploited with a crafted CAR archive file received from an untrusted remote source. The problem is that the length of data written is an arbitrary number found within the file. The vendor response is SAP Security Note 2441560.
CVSS Vector
CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:HSap Sapcar
APPSap721.510
🔵
CHECK WITH VENDOR
No clear patch data available. Check vendor references.
Tags
Memory
CWE
Related vulnerabilities
CVE-2022-26100CRITICAL9.8PL ✓same product
Niewystarczająca walidacja danych wejściowych w SAP SAPCAR umożliwia RCE
CVE-2016-5845MEDIUM5.5same product
SAP SAPCAR does not check the return value of file operations when extracting files, which allows remote attac...
CVE-2025-42999CRITICAL9.1⚠ KEVPL ✓same vendor
SAP NetWeaver Visual Composer — niebezpieczna deserializacja treści
CVE-2025-31324CRITICAL10.0⚠ KEVPL ✓same vendor
SAP NetWeaver: nieautoryzowany upload plików wykonywalnych w Visual Composer
CVE-2022-22536CRITICAL10.0⚠ KEVPL ✓same vendor
Request Smuggling w SAP NetWeaver i SAP Web Dispatcher — CVSS 10.0