Riskcovery

CVE-2026-24320

Memory Corruption vulnerability in SAP NetWeaver and ABAP Platform (Application Server ABAP)

State
Published
Severity
3.1 Low
Published
Feb 10, 2026
Updated
Feb 10, 2026
Reserved
Jan 21, 2026

Read the record on cve.org

Description

Due to improper memory management in SAP NetWeaver and ABAP Platform (Application Server ABAP), an authenticated attacker could exploit logical errors in memory management by supplying specially crafted input containing unique characters, which are improperly converted. This may result in memory corruption and the potential leakage of memory content. Successful exploitation of this vulnerability would have a low impact on the confidentiality of the application, with no effect on its integrity or availability.

Scores

CVSSScoreVectorSource
3.13.1 LowCVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:N/A:Nsap

Weaknesses

  • CWE-113 Improper Neutralization of CRLF Sequences in HTTP Headers

Affected Products

ProductVersions
SAP NetWeaver and ABAP Platform (Application Server ABAP)SAP_SE
  • KRNL64NUC 7.22Affected
  • 7.22EXTAffected
  • KRNL64UC 7.22Affected
  • 7.53Affected
  • 8.04Affected
  • KERNEL 7.22Affected
  • 7.54Affected
  • 7.77Affected
  • 7.89Affected
  • 7.93Affected
  • 9.16Affected
  • 9.17Affected
  • 9.18Affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.