Description

SAP SAPSPrint Service has memory corruption vulnerabilities in the handling of certain commands. An unauthenticated attacker could send specially crafted requests that trigger a buffer overflow in the affected component. This causes a temporary service interruption and automatic restart, resulting in low impact on availability but no impact on confidentiality and integrity.

Executive Summary

Technical Details

Mitigations

References

Additional Metadata

{
  "score": "5.3",
  "pubDate": "2026-08-11T01:17:20.540Z",
  "pubdate": "2026-08-11T01:17:20.540Z",
  "executiveSummary": "The SAP SAPSPrint Service contains memory corruption vulnerabilities stemming from improper handling of specific commands.\nThe vulnerability manifests as a buffer overflow, allowing an unauthenticated remote attacker to transmit specially crafted network requests to the target service.\nSuccessful exploitation of this flaw induces a temporary service disruption accompanied by an automatic service restart.\nThe primary security impact is constrained to a low-severity degradation of system availability, with zero impact on data confidentiality or integrity.\nThe attack vector requires network access to the affected component without requiring prior authentication or elevated privileges.",
  "technicalDetails": "The root cause of the vulnerability resides in the command processing logic of the SAP SAPSPrint Service, which fails to adequately bound-check incoming data payloads.\nWhen the affected component parses certain incoming command sequences, insufficient buffer allocation combined with uncontrolled input copying leads to a classical stack or heap-based buffer overflow.\nAn unauthenticated attacker can exploit this weakness by establishing a network connection to the service and transmitting a maliciously crafted input sequence designed to exceed the pre-allocated memory boundaries.\nThe attack flow proceeds as the vulnerable component reads the oversized input into memory, overwriting adjacent memory regions, critical execution pointers, or control data structures.\nUpon corruption of these internal memory structures, the application encounters an unrecoverable exception or memory access violation.\nThis runtime exception forces the SAP SAPSPrint Service to terminate abruptly, resulting in a temporary service interruption until the service management framework executes an automatic restart.\nThe vulnerability is exposed across the network interface utilized by the SAPSPrint Service, requiring no authentication credentials or prior system privileges to initiate the attack payload."
}