Memory Corruption Vulnerability in SAP CommonCryptoLib

CVE-2025-42940

What is CVE-2025-42940?

SAP CommonCryptoLib experiences a vulnerability due to inadequate boundary checks during pre-authentication parsing of manipulated ASN.1 data transmitted over the network. This oversight may lead to memory corruption and subsequent application crashes, significantly impacting system availability. Fortunately, the vulnerability does not compromise data confidentiality or integrity. Users are advised to apply the latest patches to mitigate the risks associated with this vulnerability.

References