Memory Corruption Vulnerability in SAP Internet Graphics Service

CVE-2021-27625

Summary

SAP Internet Graphics Service is susceptible to an unauthenticated attack that may exploit insufficient input validation. By retrieving an existing system state value, an attacker can send a crafted IGS request over a network. This action results in a memory corruption error when the IgsData::freeMemory() method is triggered, ultimately causing the system to crash and become unavailable. Notably, this vulnerability does not permit data viewing or modification within the system.

References