SAP NetWeaver and ABAP Platform Improper RFC Protocol Validation Vulnerability Leading to Memory Corruption

A vulnerability exists in the SAP Kernel used by the Application Server ABAP of SAP NetWeaver and ABAP Platform. This issue arises from improper validation of the Remote Function Call (RFC) protocol, allowing an unauthenticated attacker to send a crafted RFC request. The exploitation of this vulnerability takes advantage of logical errors in memory management, resulting in memory corruption. Such corruption could significantly impact the application's confidentiality, integrity, and availability.

Impact

Exploitation of this vulnerability could lead to memory corruption, with a high impact on the application's confidentiality, integrity, and availability.

Remediation

Security fixes for this vulnerability will be delivered through SAP Security Notes. The next SAP Security Patch Day is scheduled for June 9, 2026.