Skip to content
CVE PROGRAM SOURCE RECORD10.0 Critical

CVE-2026-44756

Memory Corruption vulnerability in SAP Extended Passport (EPP) Processing

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
sap

Description

A memory safety vulnerability exists in the Extended Passport Protocol (EPP) processing library. Under specific conditions, an unauthenticated attacker could exploit a crafted network request containing a malformed EPP header, potentially resulting in undefined behavior and abnormal program termination. Successful exploitation may have a high impact on the confidentiality, integrity, and availability of the application.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

SAP_SE SAP Extended Passport (EPP) Processing

Default version status: unaffected

  • KRNL64NUC 7.22affected
  • 7.22EXTaffected
  • KRNL64UC 7.22affected
  • 7.53affected
  • 8.04affected
  • WEBDISP 9.16affected
  • 9.18affected
  • 9.19affected
  • 9.20affected
  • KERNEL 7.22affected
  • 7.54affected
  • 7.77affected
  • 7.89affected
  • 7.93affected
  • 9.16affected

References