SAP NetWeaver and ABAP Platform Memory Corruption Vulnerability Allowing Confidentiality Leakage

A vulnerability exists in SAP NetWeaver and ABAP Platform (Application Server ABAP) due to improper memory management. An authenticated attacker could exploit logical errors by sending specially crafted input with unique characters that are incorrectly processed. This exploitation may lead to memory corruption and the unintentional leakage of memory contents. While the vulnerability could allow for some confidentiality loss, it does not impact the application's integrity or availability.

Impact

Exploitation of this vulnerability could result in memory corruption and the unauthorized leakage of memory contents, potentially exposing sensitive information.

Remediation

Security fixes for this vulnerability will be included in the SAP Security Patch Day updates. The next scheduled SAP Security Patch Day is on March 10, 2026.