{"affected":[{"defaultStatus":"unaffected","product":"SAP NetWeaver (Internet Graphics Service)","source":"CNA: sap","vendor":"SAP_SE","versions":[{"status":"affected","version":"BC-FES-IGS 7.20EXT"},{"status":"affected","version":"7.20_EX2"},{"status":"affected","version":"7.53"},{"status":"affected","version":"7.54"},{"status":"affected","version":"7.81"},{"status":"affected","version":"9.16"}]}],"cveId":"CVE-2026-120008","cwes":["CWE-787"],"description":"SAP NetWeaver (Internet Graphics Service) does not sufficiently validate certain input values within incoming requests. An unauthenticated user could send a specially crafted request to trigger an out-of-bounds memory write in a worker process. Successful exploitation could result in memory corruption or repeated termination of the affected process, resulting in a high impact on availability and a low impact on integrity with no impact on confidentiality.","epss":null,"exploits":[],"kev":null,"metrics":[{"score":8.2,"severity":"high","source":"CNA: sap","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:H","version":"3.1"}],"modifiedAt":1794271286061,"publishedAt":1794271286061,"references":[{"source":"CNA: sap","tags":[],"url":"https://me.sap.com/notes/3809953"},{"source":"CNA: sap","tags":[],"url":"https://url.sap/sapsecuritypatchday"}],"remediation":[],"revision":"2c11ad7d3ee152c88296bed150d9cf5c14ba8f4ea42ccf88ec8eb8534a435b92","sources":[{"modifiedAt":1794271286061,"name":"CNA: sap","retrievedAt":1794272926628,"url":"https://www.cve.org/CVERecord?id=CVE-2026-120008"}],"ssvc":null,"status":"published","title":"Memory Corruption Vulnerability in SAP NetWeaver (Internet Graphics Service)","updatedAt":1794272926628}