CVE-2021-27624

CVE-2021-27624 affects SAP Internet Graphics Service (SAP NetWeaver) versions 7.20, 7.20EXT, 7.53, 7.20_EX2, 7.81. The issue arises from insufficient input validation in CiXMLIStreamRawBuffer::readRaw(), allowing an unauthenticated attacker to submit a malicious IGS request over the network that ...

CVE-2021-27620

CVE-2021-27620 affects SAP Internet Graphics Service versions 7.20, 7.20EXT, 7.53, 7.20_EX2, 7.81. The root cause is insufficient input validation in Ups::AddPart(), triggering memory corruption that crashes the system and renders it unavailable after an unauthenticated network-triggered IGS requ...

CVE-2021-27625

CVE-2021-27625 affects SAP Internet Graphics Service (IGS) versions 7.20, 7.20EXT, 7.53, 7.20_EX2, 7.81. The root cause is insufficient input validation in IgsData::freeMemory(), leading to a memory corruption error that can crash the system after an unauthenticated network request that retrieves...

CVE-2021-27622

SAP Internet Graphics Service (versions 7.20, 7.20EXT, 7.53, 7.20_EX2, 7.81) is affected by a memory corruption vulnerability in CDrawRaster::LoadImageFromMemory() that can be exploited unauthenticated over a network to crash the system, rendering it unavailable. The issue originates from insuffi...

CVE-2021-27626

Affected software: SAP Internet Graphics Service (IGS) versions 7.20, 7.20EXT, 7.53, 7.20_EX2, 7.81. Vulnerability: unauthenticated attacker can submit a malicious IGS request that, due to insufficient input validation in CMiniXMLParser::Parse(), triggers an internal memory corruption and causes ...

CVE-2021-27627

CVE-2021-27627 affects SAP Internet Graphics Service (versions 7.20, 7.20EXT, 7.53, 7.20_EX2, 7.81). The issue stems from insufficient input validation in ChartInterpreter::DoIt(), which may allow an unauthenticated attacker to submit a crafted IGS request over the network, triggering a memory co...

CVE-2021-27623

SAP Internet Graphics Service (IGS) vulnerability CVE-2021-27623 affects versions 7.20, 7.20EXT, 7.53, 7.20_EX2, and 7.81. An unauthenticated attacker can trigger a memory corruption by sending a malicious IGS request after obtaining an existing system state value, caused by insufficient input va...